I'd like to have a way to define isolated networks and assign services to them.
If I have two environments (staging, production) I don't want a security flaw in one of my staging apps to allow someone to jump into the private services of my production app.
As far as I can tell the only way to achieve this level of isolation is to have separate teams, which is cumbersome.