Currently machine policies are only able to be applied at the machine level. The idea is to set the policies at the environment level so they are applied to all machines within that environment. That would make it easier to manage groups of machines at a time, and would automatically apply policies to newly added machines. This could be helpful in auto-scaling scenarios.