if osqueryd is running as root then the directory for the extensions should be owned by root and read only