for now completely destroy accounts with their identities

We're not providing email as a service yet. So getting someone elses account
after they left the provider is not a big deal yet.

We want two options to pick from in the medium term