Are you booting directly to your open mode kernel or do you have a multboot loader on your system? For some reason that I have not found yet the boot loader causes SIP to misbehave on open mode kernel even as it works allright if the kernel is booted on cold HW.