right, but trying to map shell commands into osquery would imply that data is visible somewhere other than osquery results