[wip] sh samples for cloud databases

Moving the work from #158 onto master so we can get it merged. :point_up: 
Do we ever actually *use* `TENANT` anywhere? I always see it in the sh auth samples.