For traffic based autostopping at scale, we need all VM's to power onprior to their patch window and then shut down after patch window is complete. Currently, the only way to do this is to bulk disable the rules which is a cumbersome effort. This should be done in the rule itself so that the patching can occur.