I disable SIP like this: reboot into recovery mode, run csrutil disable
and then restart.
Great, now SIP is disabled.
But if my MacBook restarts again, it looks like it is enabled again.
How can I make subsequent restarts not change csrutil status
?