But would not that be a maintenance nightmare with code with xml and lack of version control.

Also how does one restrict to a particular tenant