Do we really want to remove the 'sandbox' identifier here? This would mean that a sandbox filter could generate message types that match heka's internally used message types, like 'heka.all-report' and 'heka.sandbox-termination'.