Tenant settings

Per-tenant configuration. Each tenant is isolated — settings here don't affect other tenants.