move hacking check into cron