https://ones.com/blog/knowledge/openstack-multi-tenant-isolation-explained/