cron.hourly: add freshclam command with random start delay