others actually had this working on nixos about a year ago https://github.com/Ma27/nixpkgs/blob/7a961cf06f8b0c7aaf8af693123ce3f926a295d7/pkgs/tools/system/osquery/default.nix so I am hoping to bring it back again