HSRP failover happens but some clients still reach the old MAC

An HSRP pair switches roles during maintenance and some users remain blackholed even though the new active gateway is up.