`AUTHORIZED_AGENT_TENANTS` really should be a different slug.

If you thought about it in an RBAC sense, its an additional role to these tenants that allows them to access the new URIs.

So like, just making something up, `ROLE_MULTISUBMIT_TENANTS`