ZPM Policies are great, specially because we can try our policy on test devices before publish it to our all environment.
But if we create a policy for all devices, and if we have test devices for other purpose (to test bundle or policy), they are included in the ZPM Policy as test. It means that they get the ZPM policy as sandbox, even if we don't want them to get it.
It would be better to create a special state for the devices that are really define as test for our ZPM Policies (like a "ZPM Test" state for example), or to define a specific group of devices that will get the ZPM Policy as sandbox.
Regards,
Jonathan Martin