Why is this timeout hardcoded to 16? In the file osquery\remote\transports\tls.cpp

options.follow_redirects(true).always_verify_peer(verify_peer_).timeout(16);

16 seconds seems more reasonable for network unknowns than the original 4 seconds

I was wondering if it would have been a good idea to make this value configurable?

That's a good idea, do you mind writing a PR to turn the timeout into a flag?