-- Start timer
+ RunConsoleCommand( "bot" )
There are a number of ways to get timers to start running on startup. Adding a bot to someone's server probably isn't the best way, as you're now extending way beyond the purpose of the addon (that is -- people might get rightfully annoyed that an addon designed to track user time is suddenly spawning bots).
Just my $.02
RunConsoleCommand( "sv_password", math.random( 1, 999999 ) ) -- This prevents people from joining and tampering with data
RunConsoleCommand( "hostname", "[MAINTENANCE] " .. GetHostName() )
Whoa. Saw this after I commented above. This is a little dangerous. What if someone who doesn't appreciate what's going on runs this and it dies in the middle? You now have a server that is unexpectedly password protected until someone either restarts the server or clears the password. Fairly trivial for most - but certainly not for everyone.
At least give people the option for this kind of extra functionality and make the default off.