Short version is that the osqueryd binary in the tarball is being generated with debug symbols but the one in the rpm isnt 200mb in the tarball vs. 49mb in the rpm