diff --git a/salt/mysql/enabled.sls b/salt/mysql/enabled.sls
index f9890c300..c23d9bcad 100644
--- a/salt/mysql/enabled.sls
+++ b/salt/mysql/enabled.sls
@@ -60,8 +60,11 @@ so-mysql:
       - {{ BIND }}
         {% endfor %}
       {% endif %}
+    - cap_add:
+      - SYS_NICE
     - watch:
-      - /opt/so/conf/mysql/etc
+      - file: mysqlcnf
+      - file: mysqlpass
     - require:
       - file: mysqlcnf
       - file: mysqlpass
diff --git a/salt/mysql/etc/my.cnf b/salt/mysql/etc/my.cnf
index 243cc4c51..621ce83d8 100644
--- a/salt/mysql/etc/my.cnf
+++ b/salt/mysql/etc/my.cnf
@@ -17,18 +17,16 @@
 # join_buffer_size = 128M
 # sort_buffer_size = 2M
 # read_rnd_buffer_size = 2M
-skip-host-cache
+
+host_cache_size=0
 skip-name-resolve
 datadir=/var/lib/mysql
 socket=/var/lib/mysql/mysql.sock
 secure-file-priv=/var/lib/mysql-files
 user=socore
 
-# Disabling symbolic-links is recommended to prevent assorted security risks
-symbolic-links=0
-
 log-error=/var/log/mysql/mysqld.log
 pid-file=/var/run/mysqld/mysqld.pid
 
 # Switch back to the native password module so that playbook can connect
-default_authentication_plugin=mysql_native_password
\ No newline at end of file
+authentication_policy=mysql_native_password