Should also test that it fails sharing with a public user from a private tenant, similar to the other suggestions.