On Musca-A all expansion peripherals, including the flash controller, are configured by a single PPC bit position (see section 3.3.6 of the Musca-A Technical Reference Manual for details). This is set to non-secure to allow the UART (and other peripherals) to be accessed from NS code, so the flash controller must also be accessed through its non-secure alias.