If we pass a million keys to the sandbox, it will also blow up before it has a chance to do logging or any other cleanups. I'm not sure if the logging and contact resource share the same worker process, but if they do, then that's an issue as they should not share the same fate on most failures.