AFM protected object address list creation

Hello,

What is the best way to create protection objects which have the same protection profile  

Create a protection object on Address list containing these IPs or create separate protected objects?

noting the number of objects are huge 

System by default does not allow you to assign a protection profile on a protected group created on address list so you have to apply the following workaround, but it is mentioned This should be considered experimental only

Enable afm.allowtmcvirtuals variable

https://my.f5.com/manage/s/article/K59471927

so what is the best way?