Function forget 

pub fn forget(ident: &str) -> Result<(), String>

Stops using the security key ident: it leaves cards.toml, and its certificate leaves your keys for pgp/removed (never deleted).