I ran into the same issue and agree with your conclusion that we may not need build-sandbox-paths. Attached a patch that removes the `build-sandbox-paths` option. This causes nix to use the default value which seems to work fine.