Hmmm… something is not right here cause:
The grant is already joining into the user, it has to pull the user id from somewhere.
I wonder if the way this is scoped means that dependent destroy is not working right.
Regardless we can add a weekly cleanup.