My plan for tomorrow is to put together an implementation in osquery itself in the form of a virtual table. I don't mind doing extra work, so I'm not asking for any assurances, I'm just looking for feedback. My plan is to follow the docs on adding a virtual table and then drop the logic I put together in the proof-of-concept above and then ask for some feedback.