LDAP Provisioner does not remove group/role information when CoPerson goes Suspended

When changing the status on a CoPerson record from Active to Suspended the provisioned group information in isMemberOf does not change.

See the attached LDAP person records for when the CoPerson is Active (active.lap) and when the CoPerson record is Suspended (suspended.ldap). Also see the attached logging entries which are generated when the state changes from Active to Suspended.