Ah, someone on my team just pointed out this open issue to me that pertains: https://github.com/facebook/osquery/issues/2569