but directly on the host, I think osquery has a reasonable security model that you shouldn’t worry about priv esc