All the regions are actually owned by DMSC ( except region 5 ) for firewall ID 24, SYSFW is only using and configuring 5 of those regions - 0, 1, 7, 6, 5 ( a background region ) but the regions 2 and 3 are not able to be programmed.

This doesn't allow protecting any other entity present in MSRAM for e.g ATF, that lies in address `0x701c0000` to `0x7023ffff` as there are no available firewalls.