Landmark Security

I am trying to automate the addition/deletion/modification of actor records in Landmark with secadm command line (executed via -f).  There appears to be some limitations to both the --force and the --complete options.  The complete option will not remove anything until roles have been removed with the secadm actor role delete command.  The force command seems to remove the ssopv2 identity, leave the roles, and simply inactivate the actor record.  Has anyone determined a cleaner way to do this?

Thanks,

Marc