Description of problem:

A customer has this scenario:

compliance operator installed in 4.10.

Pause a MCP (worker or master)
Perform scan
Apply the remediation, it creates the machineConfigs
Un-pause the MCP to apply the machineConfigs and restart the nodes.
Set the pause back on the MCP.
Rescan
==> it should drive to delete the machineConfigs

How reproducible:

I am still trying to reproduce this but the customer scenario seems clear.