Thank you for opening the audit bug. With the new package a small diff resulted in the cron.hourly/0anacron script. Mainly it is now possible to override the behaviour of not running anacron when the system is on battery power. This requires no big review, we will adapt the whitelisting. The warnings in comment 0 regarding permissions-dir-without-slash should also be addressed while we're at it.