Actually I have just confirmed the ticket.db can be edited and the system will still accept it. Confirmed by updating nand from 9.5 to latest, installing some updates, dumping ticket.db, restoring 9.5 nand re-encrypted with the updated ticket.db and was able to use the updates.
Manually editing...