AS-260: Change max manifest testing to batch API calls

Retrospectively, this likely should have been in multiple PRs.
MAX is all caps, which makes it look like a constant, but it appears that it isn't: it's just self.max_policies. Maybe refer to that instead :)