The services of a tenant that plugins manage permissions of, such as an HDFS cluster: their configuration, with secrets encrypted, connection tests and resource lookups