what is the --allow_unsafe flag for?

I believe that's related to loading extensions that do not have their file permissions properly locked down

how to avoid using this flag, I was successful in turning osqueryd to xyz_daemon and now I have to use

--allow_unsafe

, I am looking forward to avoid this issue and solve it.