@sttor Could this be used to prevent osqueryd from sending query results to its TLS endpoint? If so, should this edge-case be mitigated as to prevent user mistakes? Also the usage of osquery to distribute iptables is interesting.