so the fix for this isn't specific to osquery - it needs to be a configuration management type of thing I guess