Or at least some limits like connection limits should be both global and per policy? Say not more than 1000 connections to this server; and allow not more than N bytes per second for this given policy member.