It doesn't sound like anything new. The current SoC specific solutions typically have dynamic firewalls configured on a per IP block basis interacting with some

It doesn't sound like anything new. The current SoC specific solutions typically have dynamic firewalls configured on a per IP block basis interacting with some crap in trustzone. I suppose the thing that is new is ARM offering this kind of IP off the shelf (maybe).