actually my extension does work but only if: 1. Osqueryi is started explicitly pointed to extension socket

/var/osquery/osquery.em

before extension 2. extension process started after Osqueryi 3. I see following in osqueryi:

Registering extension (trusted_apps, 16218, version=0.0.1, sdk=1.8.0)
I1116 19:01:34.577311 142845 registry_factory.cpp:107] Extension 16218 registered table plugin trusted_apps