fwiw facebook has a bounty for any priv escalation bugs you can find in osquery