so: clusters as in distinct permissions systems, or all talking to the same logical database?