Adding ClamAV explicit require to production

Why the explicit require? Because the headless workers of production
are not explicitly requiring clamav; This is because the web application
portion of production doesn't know about clamav. Instead of mixing
environments, we are going to let the workers fail.