Is the reason why the osquery can't record socket_events?