[Qualcomm feedback] Chapter 4: Clarify isolation from all non-TCB SW

[rsahita]

Reference: link

In order to isolate the TVMs from the host OS/VMM and non-confidential VMs, the TSM state must
be isolated first - this is achieved by enforcing isolation for memory assigned to the supervisor
domain that the TSM occupies - this is called the TSM-memory-region.

or any other supervisor domain for that matter.

[rsahita]

will be addressed in combined PR for chapter 4

[rsahita]

address in PR #71

cc @ozkoyuncu