Is there a recommendation on how to go about multi-tenancy on the same authorizer instance? For example, I have multiple applications making checks by proxying a centralized API (that connects to a Cerbos instance). I was hoping I could use "scope" for this, but that only seems to work when there are multiple policies with the same name. I'm afraid i'll have to prefix all of my resource policies with the instance name .e.g

application1_documents

and

application2_documents

Prefixing is the best approach here if they are truly different resources - scopes are designed for the use case where there are hierarchies within a resource kind