gv: Let the venc do non-secure allocations out of the CP heap