I see that you're using

kCFPreferencesAnyHost

https://github.com/facebook/osquery/pull/3455/files#diff-67c5d992def57c7d085a03680b3c41caR133 which won't account for values set at the ByHost levels, but this should be a nice improvement!