Changing/removing user restricted grants does not remove individual user_stig_asset_map entries

[cd-rite]

user_stig_asset_map rows need to be cleaned up when restricted grant for that collection changes or is removed.

Will likely require a migration