Breaking Multi-Tenancy Over and Over, and What We Can Learn From This