Route constraints work so tenants can't access tenants information or functionality they didn't pay for.