[Hafnium] load optee at 36bit address