remove ~secowners artifact in OldToken fix (#493)

this should clear secondary owner lists properly without leaving an
empty ~secowners string in our settings cache behind