If I write an extension, is it a safe assumption that a user could never issue queries to the extension running under osqueryd?