what might be tricky is having a plugin that pulls queries from the server via tls but logs to the filesystem