Single-tenant
One company, one or more apps.
Run IQ next to your application and give it your app’s credentials. Your backend signs a short-lived token for each answer: one to publish, one to watch. The browser gets only the token to watch, and only for that answer.