Pulling 'shell' from pillar globally makes no sense, probably a mistake; pulling it from user instead.
users=====Configure users via pillar