I assume that in a later PR when we do the actual canInteract we'll also want to have a `_cacheTenantNetworkAliasesByTenantAlias` which keys each tenant's alias to a set of aliases that are in its networks?