The SP control plane takes an aggressive approach to ensuring that pods that were previously mapping to a tenant are not mapped to another tenant afterwards by deleting the pod when its released by the global RM. Sandeep's suggestion was to just add invariant checks within mongostream that just ensures that we're only ever running SPs for a single tenant.