[PATCH v6 08/10] optee: support restricted memory allocation