there is work ongoing to instruct users what their expectation should be when using osqueryi to sculpt queries, but that behavior is expected