Resources associated with former users are not being removed automatically.
The way we manage our users in Puppet should be revisited in order to keep old user account information in the manifests
and remove associated resources when found in target machines.

A line "ensure: present" or "ensure: absent" comes to mind.