so curl and openssl s_client generates auditd even...
# general
v
so curl and openssl s_client generates auditd event, but osquery doesn't see them, wget does generate auditd event and osquery can see it