Failed to start clamav-daemon.socket: Access denied

If clamd is not running, the helpful cronjob tries to start it again, but the way it is being started can only be run as root, and the cronjob is run as the clamav user, so you get this error:

     *************************
     *     !!! ALERT !!!     *
     * CLAMD IS NOT RUNNING! *
     *************************

    Attempting to start ClamD...

Failed to start clamav-daemon.socket: Access denied
Failed to start clamav-daemon.service: Access denied
     *************************
     *     !!! PANIC !!!     *
     * CLAMD FAILED TO START *
     *************************

every time it runs

(from redmine: created on 2016-04-19, closed on 2016-04-21, relates #8431 (closed))