Also, that means the orchestrator has to mount osquery inside every container or the users will have to make sure they run osquery themselves