osQuery Management Server (Prime).Osquery Mfa Enabled (SQLite SQL Statements)

SELECT  node, value, label, path FROM augeas WHERE path='/etc/pam.d/sshd' AND value like '%pam_google_authenticator.so%';