My general preference would be to let the `rest.js` interfaces be responsible for handling those permutations and this method signature would require a tenantAlias, but we do already take in a null tenantAlias in other API's to imply "current tenant", so we should remain consistent with one or the other.

I don't think we should creep changes in those other APIs into this PR, so it's probably best to just make this optional here.