oh wow, glad to see it wasn't an osquery issue