Align ES functions with documented macOS versions by SilverPlate3 · Pull Request #8338 · osquery/osquery

hi @SilverPlate3! thanks so much for this!

I am currently testing this with older macOS versions/SDK, I recall that there was a mismatch with apple's documentation and behavior of this api at the time, and I don't want to break things for folks on older versions. But as @directionless mentioned, this should make this cut for 5.13 release.