separate question.. but sort of related to the custom traits, when I set this in the identity schema, i'm also allowing people when they login using hte kratos-ui to put in any tenant_id that they want.. how do I stop that?