@allister note that if we turn on this flag, we are doing exactly the same check as santa, so it does not make a backstop for osquery...