hey y'all, quick question. CopyFieldFromMap is used in user_events, process_events and socket_events:
https://github.com/osquery/osquery/search?q=CopyFieldFromMap&unscoped_q=CopyFieldFromMap
in process_events the default is "0", but it's an empty string everywhere else; does anyone know if that's intentional? it feels like you wouldn't want something like UID defaulting to "0"