We should add OP-TEE support in case when we want to communicate with a Trusted Application.
tee-supplicant do already this kind of job, we must check if we only add tee-supplicant to the build or we extract only the necessary and include it in kbootd.
https://github.com/OP-TEE/optee_client/tree/master/tee-supplicant