idk how that works. I would load osqueryd and look at the results log