But it's probably better to have limited osquery capabilities and limited attack surface, rather than doing the above, no?