https://ones.com/blog/multi-tenant-data-isolation-cloud-security-best-practices/