it'd be neat to get https://github.com/osquery/osquery/pull/7138 into 4.9.0, I think it's getting pretty close.