Any reason to not allow specifying the tenant in this search endpoint? It covers both `includeExternal` functionality and what we're trying to do with admin.