tenant

The queries of a subscription handler of a commit of tenantId: trusted code whose authenticated scope pins tenantId, so it reads that whole tenant and no other, and SubscriptionQueries.trusted for the rest. A type whose tenant is fixed to another one shows such queries nothing.