CRACEN protects the Protected RAM and the SEED register from being accessed by the CPU.
Only KMU is able to push assets to the Protected RAM and the SEED register. The CPU does not have access to these. The hardware has built in protection that does not need configuration.