Audit (and other system call tracing solutions) do have a performance impact, with or without osquery behind it