Introduce a way to also permanently delete the sensitive info from the staff logs

This looks like it will delete all user_histories records associated with the post or topic id, rather than overwrite just the details section or limit the destructive action to only the permanently deleted log?