[syslog-ng] Using source tags in rewrites?