This is working as designed. The security record stays until the admin does an explicit action to remove it. The delete/reset command can be done automatically (after 30 days by default) or via commands, and we don't want devices waiting 30 days that have been blocked and then getting back in. Therefore, the security record lasts forever or until the admin removes it to avoid any security issues.
The security record has the wipe and approval information.
Feedback response number RSSN8VLG3C created by Robert S Sielken on 06/25/2012