Multi tenancy ton istiod

I will deploy multi istiod on few workspaces env, i want to isolate discovery, it’s possible used appNamespace Key, not depreacated on v1.5 version…and a other think, i will want to scope rolebinding istio sa limited for m’y workspaces…
Regards,