Is osqueryd also running as root?