The below will delete the currently logged in users login.keychain, if the $logoutPrompt is set to Y then it will bring up the standard OSX logout prompt, else it will kill the loginwindow process & force logout.
When the user nexts logs in they will recreate the login.keychain.
We have this a an item in Self Service.