Can you say more about how you imagine it would work? If rocksdb starts using too much space, try to denylist the query? Restarting osquery wouldn’t free the space