IIRC you can just turn off sip and set the boot argument that controls it without a custom kernel