tighten /etc/crontab to be always mode 600, even in easy (bnc#867799)