salt : limit ssh key with options in authorized_keys

gen-backup-authorized.sls

{% set option1 = 'no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc' %}
{% set command = '/home/backupuser/authorized.sh' %}

{%
set blah = {

'user1': {
    'ip': '192.168.0.2',
    'comment': 'Nom Prenom 20.11.2017',
    'vol': 'volume1',
    'clef': 'ssh-rsa AAAA...6a0mtJbezwmHIZ2ifTmyASBaKpR3XnV9RfDXeovzEwWot'}
    ,
'user2': {
    'ip': '192.168.0.2',
    'comment': 'Nom Prenom 24.11.2017',
    'vol': 'volume2',
    'clef': 'ssh-rsa BBBB...6a0mtJbezwmHIZ2ifTmyASBaKpR3XnV9RfDXeovzEwWot'}
    ,
'user3': {
    'ip': '192.168.0.3',
    'comment': 'Nom Prenom 20.11.2017',
    'vol': 'volume3',
    'clef':'ssh-rsa CCCC...6a0mtJbezwmHIZ2ifTmyASBaKpR3XnV9RfDXeovzEwWot'}

    }
%}

{% for name, values in blah.items() %}
ssh-auth-{{ name }}:

  ssh_auth.present:
    - user: backupuser
    - config: /%h/.ssh/authorized_keys
    - names:          
      - from="{{ values.ip }}",command="{{ command }} {{ values.vol }}",{{ option1 }} {{ values.clef }} {{ values.comment }}

{% endfor %}