common.sls

openssh:
  keys:
    gareth:
      allow: True
    root:
      allow: True

dns1.sls

openssh:
  keys:
    gareth:
      allow: True
    root:
      allow: False

dns2.sls

openssh:
  keys:
    gareth:
      allow: False
    root:
      allow: True

top.sls

base:
  '*':
    - hosts.common
  'dns1.loc.wiked.org':
    - hosts.dns1
  'dns2.loc.wiked.org':
    - hosts.dns2