What paths or filesystem scope does

osqueryi

follow or conform to when the

suid_bin

table is queried? For a default install, that is. Just noticed that

/Applications/Promise Utility.app/Contents/Resources/evaSmart

is suid and guid (root:wheel) but it does not show up in an

osqueryi

query. I did not see anything related to altering behavior or scope of where osquery looks for suid files in docs or source. Am I missing something "obvious"?