"Test Target" instructions - only consider SAU / IDAU, or also PPC & MPC

The "Test Target" instructions return security attribute information about a region.

I think I read (cannot rememeber where) that the core returns security information based on the IDAU and SAU.

But what if for example my PPC or MPC configuration override the SAU & IDAU (or can they?  in either direction?) - will "Test Target" take that into consideration?

I haven't worked on chip design in quite a while but based on the architectural diagrams I've seen (either from Arm or ST Micro, sorry I can't recall) it appears that it would only be the SAU & IDAU.

If this understanding is correct, how does secure check addresses for security when TT isn't necessarily the truth?


Thank you!!