I searched some TAC cases for answers to your questions.
Here's what I found:
"Like many relational databases, the CiscoSecure user database handles the deletion of records by marking deleted records as deleted but not removing the record from the database. Over time, your CiscoSecure user database may be substantially larger than is required by the number of users it contains. To reduce the CiscoSecure user database size, you can compact it periodically."
It looks like to remove the deleted users, you need to compact the database with a command like this:
CSUtil.exe -d -n -l
Please refer to this link for more info about compacting the dB & to make sure you follow the precautions like backing up the database, etc.
http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/csnt30/user/ae.htm#72126
Seems like once you compact the dB, you can re-run your report to dump out all the users. This time, the deleted users should not be there.
thanks
peter