The bin/services wipe workflow still tries to remove passwords and hashes from the user table, but they've moved to the auth_password table. That (and the auth_passwordtransaction table) should be truncated instead.