One thing I'd suggest would be an attribute controlling whether the cron jobs are enabled. Something like `node['clamav']['scan']['enabled']` that defaults to false so cookbook behavior doesn't change for current users unless they explicitly enable the new cron jobs.