Enforcing settings across tenants

[STgversluis]

We run Dynatrace Managed with several tenants (dev, test, acceptance, production). We want to use Monaco to enforce certain settings across all tenants, such as custom process monitoring rules to prevent certain processes from being detected by Dynatrace.
For this, I have set up one json:

{
  "enabled": true,
  "mode": "{{ .mode }}",
  "condition": {
    "item": "{{ .item }}",
    "operator": "{{ .operator }}",
    "value": "{{ .value }}"
  }
}

The configs look like this:

- id: EXE_NAME_CONTAINS_<processname>_MONITORING_OFF
  config:
    template: cpmr.json
    skip: false
    parameters:
      mode: "MONITORING_OFF"
      item: "EXE_NAME"
      operator: "CONTAINS"
      value: "<processname>"
  type:
    settings:
      schema: builtin:process.custom-process-monitoring-rule
      schemaVersion: 0.4.8
      scope: environment

However, i have seen duplicate rules popping up. I must be able to apply this config on a very regular basis to make sure these rules stay in place, but I also want to make sure we do not get duplicate configs and I want to apply the same config across all tenants, so using a download will not work because the originObjectId is different in each tenant.

It is very important for us to have this in place. If Dynatrace starts monitoring these processes anyway we will have very serious performance impacts leading to business-standstill incidents.

How do I configure this in a single Monaco setup?