this looks related but im not sure i understand what's happening here: https://github.com/facebook/osquery/issues/2578