Q about tokens in iwidmap (find if/where used?)

System

I'm having fun with iwidmap (again)...

it seems like some of the users/groups that have tokens, aren't used in the system anymore...as if they were added in originally, then later changed out, but the token for them wasn't removed...are tokens supposed to be removed when all references to them are removed?

is there a CLT or other method to get a list of what a specific iwidmap token is associated with? if we're positive that a user/group is no longer used anywhere within TS, what happens if we just delete the token entry in the iwidmap output file before reimporting it?

feel free to reply with an RTFM if you have a CLT name for me to read up on ;-)

thanks,
-Rori