how would I go about adding a proxy-certificate chain to osquery-config to get it to talk to a server on the internet behind our MiTM ssl-inspection proxy?

Are you looking for

--tls_server_certs

?

I was, I found it, either I did it wrong, or it didn’t do what I thought it would - it’s not working