For certain jurisdictions and privacy policies, it could be useful to have a "prune" job that completely wipes the database of records for identities that have been deleted (not deleted status, but ChangelogBehavior deleted=true) for some period of time.

Need to pay attention to foreign key dependencies (notifications, etc), similar to Expunge sanity check.