Right now, if you try to deactivate a certname that doesn't exist, puppetdb issues a query that traverses (scans) all the report partitions looking for the latest report timestamp in a row it will never find. We already have that information in the certnames table, so don't do that.