In my experience, the package remains indefinitely. It could be manually
deleted if a user knew where to look and to change directory
permissions, or of course through a wipe of the volume of course. That’s
it. I’ve had cached packages on my system f...
Have you tested deleting and manually recreating the account? Depending
on your OS version, it will prompt the SecureToken enabled admin account
to authenticate and create a token upon first login.