Yeah. ^^^ that table is very weird/magical. It’s kinda awesome that we get even that much inside osquery, but it’s a corner where apple’s APIs haven’t exposed much. As far as I can tell, the data is locked in the keychain. So you need an unlocked keychain and sudo to read it.