Michal Nicpon

I followed the instructions in https://scriptingosx.com/2017/05/relocatable-package-installers-and-quickpkg-update/ to create a non-relocatable package from the osquery package, and was able to install it successfully.

The following test failure is expected ``` --- FAIL: TestSyncCPEDatabase (42.87s) cpe_test.go:134: Error Trace: /Users/michal/fleet/src/fleet/server/vulnerabilities/cpe_test.go:134 Error: Received unexpected error: getting cpes for: 1Password.app: no such table: cpe_2 Test: TestSyncCPEDatabase ```...

> Changes look great. Curious on what's the status of this PR, is it currently in progress or paused due to other priorities? In progress and ready for review

Note, https://github.com/fleetdm/nvd/pull/11 must be merged before this pr.

Fixes #4804

> Left a couple of PR comments. > > Other stuff to consider: > > 1. We need to QA an old/current version of Fleet (say, `fleet-v4.19.0`) using the new...

### Notes for QA Until this pr is merged, the latest nvd release may not include the new CPE database. Therefore, you should set the following environment variables when running...

> @michalnicp it looks like a user is able to customize these settings today using existing configuration options. Is my understanding, correct? You can customize it in `fleet`, but not...

Why do we need windows updates ingestion to be configurable?

Tested in loadtesting environment with Using [vegeta](https://github.com/tsenart/vegeta) and a loadtesting environment with 20K hosts ``` token="" # 100000 req/min = 1667 req/sec jq -ncM "1 | while(true; .+1) | {method:...