--- features: - | A new tenant option :attr:`tenant.disallowed-labels` (similar to :attr:`tenant.allowed-labels`) can be used to restrict what labels a tenant has access to.