today I stumbled over a change which introduced a new tls endpoint for a killswitch feature, which looks a lot like feature flagging in osquery. I’m curious about the design decisions that went into it? Any reason it was a separate endpoint vs a part in the config?