add filtering in BO / - split bo/fo - auth on bo - different master for bo/fo