If a smart credential is re-encoded, it is possible to disassociate the original identity from a Mac user. This can be done using the built-in sc_auth utility.
To unpair all previously paired identities on a Mac, use sc_auth unpair. For additional information, refer to the “man sc_auth” page.
In a command window, enter the following commands to dissociate all associated smart credential identities:
$sc_auth list
$sc_auth unpair