I don’t know the history of why FB sets the flag that way. It may not be intentional. Let’s PR a change, and see who weighs in… https://github.com/facebook/osquery/pull/5467