I’ve tried adding my self-signed certificate to my local keychain (MacOS) but that doesn’t seem to work

I don’t think osquery uses the OS cert stores. Have you tried passing something along as

tls_server_certs

?