internally, osquery must have this in RocksDB sinc...
# general
i
internally, osquery must have this in RocksDB since it's tracking state...?