Comment 4 for bug 956048

Specifically, if the auth data for a subscription differs from the one on file, the dupes should all be removed and only the latest entry kept. This isn't just at time of package removal, but also during install -- whether from 'Reinstall previous purchases' or by going directly to the package and clicking 'Install'.