Hrm. I say that but I don't see examples of this in our external packs. We definitely do this internally, and I'm like 95% sure it's something osquery is cool with and not some magic we do before the config lands on the endpoints