Also, something still escapes me. How this service has been installed (originally)? Because if you're using osquery 4.0.2 or latest master this should work, if not, it's a bug?