We need to store the tenant variables somewhere and updates need to propagate across the cluster which makes the config a good place to store all of that imo.

Maybe we could add an option (yes, I know, yet another option :( ) to prevent it from output a module/option to the UI?