domx: if low on secure mem use heap