```
[213] SaltStack recommends using cmd.run together with onchanges, rather than cmd.wait
firewalld/init.sls:53
  cmd.wait:
```

Usually fix:

* `cmd.wait` + `watch`

To:

* `cmd.run` + `onchanges`

But this code doesn't use that construction, so leaving as-is.