Sure. If I was doing this, I’d still use the same config parsers that exist, and just try to find a spot earlier in osqueries start up where you could run the parse and execute the queries