There is an option for the user resource to purge ...
# forge-modules
b
There is an option for the user resource to purge unmanaged keys, did you set that?