Title says it all: removing an institution from the middleware-config (and then push using bash-script) does not remove the institution from the allowed_second_factor table, or the institution_configuration_options (and possibly more, haven't checked them all).