Your company is running a multi-tenant Kubernetes cluster. You are asked to set up rules so that Pods from different departments (say, finance and engineering) should not be scheduled on the same node for compliance reasons. What feature would you use to enforce this requirement?