Multi-tenant observability on two servers: architecture tradeoffs and isolation challenges