Comment by zb3

The TEE is where both the device encryption keys (not DRM) and Widevine keys (DRM) are stored..