thanks for the options @Itai Admi I believe the second option, using lakeFS hooks is better, as it provides real isolation, and consumers are exposed only to tested data.