I believe osqueryctl actually pulls the plist out ...
# general
a
I believe osqueryctl actually pulls the plist out of /LaunchDaemons in addition to unloading