Ensure `sandbox.checkout_sources` hash value is string