m7-common: Don't allow insecure allocations from MM heap

* Userspace is OK with this and will redirect to the IOMMU.
  This will allow us to switch the MM heap to CMA and reclaim