It might be a bit cleaner if the oae-config API listens for `oae-tenants` pubsub messages rather than the tenant module invoking the config api via pubsub?