AM3357: Trace pins configuration

Part Number: AM3357

As described by James in this post:
e2e.ti.com/.../498265

I would like to configure EMU pins as clock and data ports.

I have used below code to configure those pins but accessing any address starting from 0x4B160000 (DebugSS_DRM) is unavailable and in result triggers data abort.
I tried configuring MMU for that memory address part but it ends up same way.
There is absolutely no documentation for that part of chip.
I do not want to use CCS or GEL files - I need to embedded this into application.

I have contacted support about documentation (which might need NDA to access - which I have) but they asked me to make another thread on E2E :/

static void trace(void)
{
    volatile unsigned int* debugSS_DRM = (volatile unsigned int*)0x4B160000;
    volatile unsigned int* dpmCtrlReg = (volatile unsigned int*)(0x4B160080);
    volatile unsigned int* dpm_emu0 = (volatile unsigned int*)&dpmCtrlReg[0];
    volatile unsigned int* dpm_emu1 = (volatile unsigned int*)&dpmCtrlReg[1];

    unsigned int reg = *dpm_emu0;
    reg &= ~(0xFF);
    reg |= 0x6;
    *dpm_emu0 = reg;

    reg = *dpm_emu1;
    reg &= ~(0xFF);
    reg |= 0x2;
    *dpm_emu1 = reg;
}