/etc/
You may want to add an /etc/cron.deny file, missing from the standard Debian install (you can copy /etc/at.deny).
/etc/cron.deny
/etc/at.deny