My dilemma w/ (1) is that the osquery user has to know the

node_key

for a hostname. With option (2) another secret is created specifically for the storage of distributed queries and the osquery user would set.