On the feature set of osquery, before it is considered to be mergeable in core I would start with a blueprint issue documenting the intended use case