No subject

able to subscribe to a queue that is named is such a way that it
contains their client id, and being able to publish to a
server-generated queue is sufficient. You can set up access control
rules that allow this.

Bear in mind that clients have no way of learning the names of
server-generated queues that were generated for other clients, and they
are named in a cryptographically strong way. Therefore the vhost
isolation is not strictly required to protect against inadvertent access.


-Emile