ah, you've found something cool, everything in osquery is special, there's no "reactive" like experience to configuration. But a good 'describes most things' statement: there are some things that need CLI only, some things that may be configured via the first time a configuration is pulled, and somethings that can be updated freely at runtime whenever.