boot plist flags, put it

<key>Kernel Flags</key>
<string>right here</string>

but for the npci, just replace the existing one which is 0x2000 to 0x3000