As pointed out on slack, it's not clear how to get a constraint that isn't `==` I added a spew to [`table.Call`](https://github.com/kolide/osquery-go/blob/5aaecb264273aeafc8b120728006204ee9ee2552/plugin/table/table.go#L54) and I don't see the constraints coming in. If I look at a trace in panic, I don't see much in between that, and the thrift layer.