scope projects to tenant. fixes #17