personally, I don't think the file-based approach scales well enough to really be practical outside of a managed server environment. It fails horribly for user endpoints

@clippy thank you for the advice. Totally make sense, you need the tls server to control the configs. Since my final vision will integrate osquery with our orchestration tool (OneOps) we maybe have OneOps to be the tls server and it uses chef (soon Ansible) to manage configs , deployments and everything else.