@clippy, there are times when osquery hits a fatal and cannot log, in those instances there should be a swansong logline to syslog