Identity Context, Tenant Isolation, and Trusted Enforcement