1. An apparatus comprising: an arbiter circuit configured to generate both (a) a first address signal in a virtual memory space and (b) an identification signal by arbitrating among a plurality of clients to access a physical memory space, wherein (i) each of said clients is classified as one of either one or more privileged clients or one or more non-privileged clients, (ii) said physical memory space comprises at least one secure space, (iii) said secure space is used to protect data of said privileged clients from being accessed by said non-privileged clients, (iv) an amount of said secure space does not change during an access to said secure space and (v) said identification signal uniquely identifies said clients; and a translation circuit configured to generate a second address signal by translating a page in said virtual memory space into said physical memory space based on said first address signal and said identification signal, wherein (i) said page corresponds to a particular one of said clients that won said arbitration, (ii) said page translates into said secure space if said particular client is one of said privileged clients, (iii) said page translates outside said secure space if said particular client is one of said non-privileged clients, (iv) said secure space (a) is permitted to be accessed by said privileged clients and (b) is not permitted to be accessed by said non-privileged clients and (v) a single page translation table translates from said virtual memory space to said physical memory space.