e.g. if I wanted my osqueryd only to allow the TLS configuration to schedule queries for usb_devices and nothing else