i was talking to @theopolis recently and he was saying that when you have a lot of extensions on a very lean production system that isn’t running a lot of processes, have 5+ processes that are all osquery is not a good look when there is only 1-2 other processes running in total