The TEE TG has proposed additional PMP functionality to mitigate some forms of security attack against M-mode. A description of the threat model and the proposed augmentation is at the link below. Please review and provide feedback on this thread; I'll do the same shortly.