For my particular use case I disabled SIP and everything was fine, but workarounds should be possible.