base:
  dom0:
    - match: nodegroup
    - gpg.create