Issue Summary

Disabling two-step verification and re-enabling it will not clear the security key entries for the old devices

Steps to Reproduce

1. Enable two-step verification and add security keys from a device.
2. Disable two-step verification and then re-enable it using a new app or the same app with a new entry.

Expected Results

Security keys associated with any old devices should be removed once 2SV is disabled.

Actual Results

Previously created security key entries will remain. If they are not removed, the next time the user logs in, they will be asked for security keys (pass keys).

Workaround

Users should manually delete the old security keys after re-enabling 2SV.