Maybe have the log emails to an alias the doesn't get scanned?
It's sent from /etc/cron.daily, invoked from /etc/crontab. I guess I could set up an alias for root in the crontab to, say, "rootcron", and whitelist_to that destination.
Maybe have the log emails to an alias the doesn't get scanned?