[PATCH v7 09/11] optee: support protected memory allocation