We are planning on allowing a "sponsor" from the partner's users to be able to
manage other users of their portal; so even if I use host-named site
collections, that sponsor will be able to "see" users from other partners. In
the blog post above he adds a SPSiteSubscriptionProfileConfig with a
SynchronizationOU parameter but the whole profile concept isn't available in
SharePoint Foundation.