[lumberjack] what should replace /dev/log?