this one is super hard to repro. even if you click don’t allow, osquery is still running. and it doesnt happen a second time