awesome, will wait to cut a release until you'd have a chance to check it out. If you do catch a moment, can you look into bundling the CURL PEM into the packages too? I can't find an issue right now, but I thought there was one. It should be easy enough to ship their PEM with the package into

/usr/share/osquery/certs/

and change the default location of the flag to point there. That will make 3rd-party applications using osquery for integrations a lot easier too.