Why can't the Splunk AWS Add-On consume Guardduty events using Kinesis like it does for VPC Flow Logs without the need for the HEC?"