turn off SIP and authenticated-root in recovery mode.
mount system volume (not snapshot) to a editable user space
create your own snapshot after modification.
/System/Library/Displays/Contents/Resources/Overrides/
I guess Apple does some snapshot volume checksum in the boot in process to prevent illegal modifications.
RollR
Users receive reputation points by contributing quality content to the forums.
Posts include post and replies published on the forums.
Post authors can mark replies as Accepted to indicate successful solutions.
Apple Developer Forums admins can mark replies as Apple Recommended to indicate an approved solution