I mean, lets say mil wants a high value applet on its combat phones. Some little thingy that affords using the camera as a range finder, the GPS as a location identifier, and affords with the entering of an appropriate authority code the launching of a missile from a drone in a parking flight position. Mil is going to require all of that capability to be completely locked down. The app itself must be encrypted and only afforded transient decryption for execution in TZ. It would seem that the loading of the trustlet and tying the trustlet to a specific device would incur a fee, a one time fee. Management of the device would entail a recurring fee. Updating the trustlet would incur a new fee. It seems to me though that there would be no time-dependent component to the trustlet, it is really nobody's business if mil uses, is using, continues to use, will use, has ever used the trustlet. It seems to me the same my-business/your-business barrier would apply to any truslet for any enterprise. One fee to install one trustlet, after that it and the device are owned. Device maintenance is a separate issue.
edit: the actual running of the app, and entirely untethered intradevice event, bears no fee.