@alessandrogario @nedwidek Yeah so this isn't real world - I've created a fake user with UID 0 to allow for a demonstration of something bad that could happen to a system. Something you may want to look into on a system when investigating an incident. Good to know that it's not going to work, just very unexpected. Will adjust my query to use a less than quantifier instead .