So i can think of TrustZone as separate OS rite? ..Whenever normal OS wants a secure action to be taken , it reboots or calls the other secure OS and does the action securely. So TrustZone is like an extra OS in which one can perform safely all sensitive operations !