@obelisk I’m curious if you have any ideas about how to deal with CFPrefs for a specific user cleanly. My instict is to thrown an osqueryi for each user and call it via thrift from the root daemon