I've been trying to do this all afternoon so I can try Kepler Patcher, with no luck.
In config.plist, I've set csr-active-config to "00000000", and also added "csr-active-config" as a parameter in NVRAM->Delete->7C436110-AB2A-4BBB-A880-FE41995C9F82,
No joy. On each reboot, "csrutil status"...