[TF-M] question about the init sequence of tf-m secure partitions