The wireless connectivity problem was eventually solved because the user had an issue with his account.
My question still stands: Is there a way to delete the PAC's in the profile on startup? About once a week we get a user who cannot authenticate to the wireless, and the fix involves going into the profile, hitting the "select servers" option, then removing the PAC's. I think the users encounter this when they hibernate instead of shutting down the machines. But we also have users who encounter this problem and I'm very certain they are shutting their machines down when they leave their clinic areas.