If https://osquery.slack.com/archives/C08V7KTJB/p1573233400375000 is correct, we should configure pulling that. It feels like it’s violating some nebulous user contract