Support per-tenant isolation for service metadata files.

Partially implements: blueprint per-tenant-isolation

Change-Id: I7393e748216ddaa59d6e90249b263514d08f9d34