I set a more permissive authentication mechanism temporarily on the salt-master to override the new default (this is only necessary currently for the mail host which runs salt 2018 series.
ee@salt:~$ sudo cat /etc/salt/master.d/hold-back.conf
minimum_auth_version: 0