delete privs when necessary
diff --git a/xos/services/vpn/admin.py b/xos/services/vpn/admin.py
index 9c76f5d..f3d680f 100644
--- a/xos/services/vpn/admin.py
+++ b/xos/services/vpn/admin.py
@@ -277,6 +277,7 @@
 
                     obj.tenant.enacted = None
                     obj.tenant.save()
+                    obj.delete()
             # TODO(jermowery): determine if this is necessary.
             # if type(obj) is VPNTenant:
                 # if the tenant was deleted revoke all certs assoicated
@@ -294,6 +295,7 @@
                         "build-client-full " + certificate + " nopass")
                     obj.tenant.enacted = None
                     obj.tenant.save()
+                    obj.delete()
 
 # Associate the admin forms with the models.
 admin.site.register(VPNService, VPNServiceAdmin)