Revisit user account management
Resources associated with former users are not being removed automatically. The way we manage our users in Puppet should be revisited in order to keep old user account information in the manifests and remove associated resources when found in target machines.
A line "ensure: present" or "ensure: absent" comes to mind.
Migrated from T920 (view on Phabricator)