According to PSA FF, it needs to add dependencies on secure partition manifest. This attribute lists the SIDs which the Secure Partition code depends on and is allowed to access. If access between a client Secure Partition and an RoT Service is not specified in the manifest, then the client is not allowed to connect to the RoT Service.