This is an old thread but a good repository for updating this list for modern OS
I am missing some pieces and would like to fill in the blanks... especially for Boot-args.
I have tried
--without bootargs
--without bootarg
--without boot
--without ba
--without boot-args
--no-bootargs
--no-bootarg
--no-boot-arg
Apple Internal: (--no-internal)
Kext Signing: (--without kext)
Filesystem Protections: (--without fs)
Debugging Restrictions: (--without debug)
DTrace Restrictions: (--without dtrace)
NVRAM Protections: (--without nvram)
BaseSystem Verification: (--without basesystem) ?
Boot-arg Restrictions:
Kernel Integrity Protections:
Authenticated Root Requirement:
running strings /usr/bin/csrutil
returns some intriguing stuff but I haven't been lucky
some strings from csrutil
isARVSealingRequired
isAppleInternalPolicyAllowed
isBootArgFilteringEnabled
isCTRREnforcementRequired
isDTraceRestricted
isDebuggingRestricted
isFileVaultEnabled
isFilesystemAccessRestricted
isKernelDebuggingRestricted
isKextSigningRequired
isNVRAMAccessRestricted
isRecoveryVerificationRequired
isThirdPartyKextLoadingEnabled
...
setARVSealingRequired:
setAppleInternalPolicyAllowed:
setArguments:
setBootArgFilteringEnabled:
setCTRREnforcementRequired:
setCredential:type:error:
setDTraceRestricted:
setDebuggingRestricted:
setExecutableURL:
setFilesystemAccessRestricted:
setFirmwareSecurityLevel:
setKernelDebuggingRestricted:
setKextSigningRequired:
setLocalAuthenticationContext:
setNVRAMAccessRestricted:
setObject:forKeyedSubscript:
setRecoveryVerificationRequired:
setStandardOutput:
setThirdPartyKextLoadingEnabled: