DD VTL vault usage in SMT

Anybody running a Data Domain with secure multi-tenancy and using the VTL? I need to understand whether there is a discrete vault for each tenant, or whether it remains as a single vault. If the latter, is there a mechanism to prevent cartridges from one tenant being visible to another tenant. The documentation I've been through (so far) is silent on the issue.

Cheers,