I Saw on twitter that a beta tester use the same cert/UID for every games like a private header with the Sky3DS+.
If it's true, that will allow us to just take official xci dump and add our "private header" dumped from one of our game, and never sell it to Always have this private header. And...