would it be possible to add some functionality to osqueryd that was gated to OS X that allowed osqueryd to use the default browser cert bundle so that running osqueryd with an arbitrary remote tls server with a valid cert didn't require dropping a server cert? @theopolis?