I disable SIP like this: reboot into recovery mode, run csrutil disable and then restart.
Great, now SIP is disabled.
But if my MacBook restarts again, it looks like it is enabled again.
How can I make subsequent restarts not change csrutil status?