Make CLAMAV option off by default, and mark broken
when CLAMAV option is on.
It seems that recent security/clamav doesn't install
cltypes.h which is included from clamav.h.