I'm trying to envision who you think is installing osquery that can't be bothered to configure a certificate? You're already asking them to drop down into a command line