Long answer :If they want this vCD thing like, you need to find another way to get them to control over vShield, something I would suggest is like an interface (adapter) for vCNS if this is the case to have this tenancy access through the APIs to their network services consumption.
