clarification: they both run, but only the command line one results in kolide receiving the query results