To force the removal of all identities discovered through Kerberos snooping, use the following command:
configure identity-management kerberos snooping force-aging time [none | minutes]
