Filter out tenant list when using a VO

This addresses #12, although only when using a VO proxy for requesting the list of tenants. 
Token-binding should also be in place for solving properly this issue.