fail the state if it isnt in top

salt/ssl/init.sls

@@ -576,4 +576,10 @@ elastickeyperms:
 
 {%- endif %}
 
+{% else %}
+
+ssl_state_not_allowed:
+  test.fail_without_changes:
+    - name: ssl_state_not_allowed
+
 {% endif %}