Don't add key_url as it is deprecated and not needed when
pkgrepo_keyring is set. This has been supported since stretch so make it
the default. Also use py3 repo by default for Debian family as it is now
the only option.
Additionally, Raspbian has been updated to use signed-by by default.
```
Offenses:
test/integration/v3000-py2/controls/pkgs_spec.rb:10:5: C: [Correctable]
Style/WordArray: Use ['Salt Minion'] for an array of words.
(https://rubystyle.guide#percent-w)
%w[Salt\ Minion]
^^^^^^^^^^^^^^^^
test/integration/v3000-py3/controls/pkgs_spec.rb:10:5: C: [Correctable]
Style/WordArray: Use ['Salt Minion'] for an array of words.
(https://rubystyle.guide#percent-w)
%w[Salt\ Minion]
^^^^^^^^^^^^^^^^
test/integration/v3001-py3/controls/pkgs_spec.rb:10:5: C: [Correctable]
Style/WordArray: Use ['Salt Minion'] for an array of words.
(https://rubystyle.guide#percent-w)
%w[Salt\ Minion]
^^^^^^^^^^^^^^^^
test/integration/v3002-py3/controls/pkgs_spec.rb:10:5: C: [Correctable]
Style/WordArray: Use ['Salt Minion'] for an array of words.
(https://rubystyle.guide#percent-w)
%w[Salt\ Minion]
^^^^^^^^^^^^^^^^
test/integration/v3003-py3/controls/pkgs_spec.rb:10:5: C: [Correctable]
Style/WordArray: Use ['Salt Minion'] for an array of words.
(https://rubystyle.guide#percent-w)
%w[Salt\ Minion]
^^^^^^^^^^^^^^^^
19 files inspected, 5 offenses detected, 5 offenses auto-correctable
```
Avoid this error:
```
ID: salt-master
Function: pkg.installed
Result: False
Comment: Error occurred installing package(s). Additional info follows:
errors:
- Running scope as unit run-402.scope.
Loaded plugins: ovl, ulninfo
https://repo.saltproject.io/py3/redhat/7Server/x86_64/3002/repodata/repomd.xml:
[Errno 14] HTTPS Error 404 - Not Found
Trying other mirror.
No package salt-master available.
Error: Nothing to do
```
* CVE-2021-25283 enables Jinja2 safe mode, which breaks use of
`'dict' in x.__class__.__name__` workaround
* Workaround no longer needed as CentOS 6 is EOL
