I’m a bit steeped in how our code does this, and not how osquery can work. But, AFAIK that’s kinda how it works? you pass osquery an enroll secret, it uses that to exchange a node key, which is used for subsequent auth.