Default flags are

lo,aa

and osquery docs talk about adding

ex,pc

but not

ad

yet it’s added to the example