Yep, these are the flags I've been using for SIP. Remember to put them in the RtVariables section of your config.plist. I use Clover Configurator for editing, for ease of use, but it's simple enough to do manually.Make sure to put BooterConfig 0x28 & CsrActiveConfig 0x3