Alternatively, if you just have a multi-tenant application that uses Keto, and you have full control of what goes into it, you could e.g. use a UUIDv5 with a per-tenant namespace UUID, or any other means of distinguishing tenants on a data level.
Keto namespaces are not isolated.