refs #4126 for security remove settings in case a user is deleted or a plugin installed, needs to be tested