[PATCH v4 4/6] optee: support restricted memory allocation