Should this havce full disk access or just osqueryd?

It should not need it, but if you're wrapping osquery with a launcher that would need access as well