yep i have that set in osquery.conf used by osqueryd, and i do see the correct events being returned (which is awesome!) from osqueryi run from the container running osqueryd