deny /var/spool/cron/root w,