Anyone know if I can configure osquery to not do https://github.com/facebook/osquery/blob/2.10.0/osquery/tables/events/linux/socket_events.cpp#L153-L155 such that I can manage the audit rules entirely outside of it?