But I'm not sure whether the TDX way is architectural or just an implementation choice which could be changed later, or whether it applies to other arch. If that behavior cannot be guaranteed, then we may still need a way for IOMMUFD to request long term pin.
