Secure multi-tenancy; everything belongs to account