I was reading a bit about this it is also possible to parse messages coming form LOG_USER, although it could be more convenient to have it's own dedicated facility. As this is the only cross-platform default that will work and given that it is possible to configure your own facility, I think leaving it as is will be our best option