explicitly set the user, group, and mode to match the package's

sshd_config

openssh/config.sls

@@ -7,6 +7,10 @@ sshd_config:
   file.managed:
     - name: {{ openssh.sshd_config }}
     - source: {{ openssh.sshd_config_src }}
+    - template: jinja
+    - user: root
+    - group: root
+    - mode: 644
     - watch_in:
       - service: openssh