What I do is:
If want to use SysNAND (playing games online) just boot without RCM or anything like that, pure stock.
If want to use EmuNAND (homebrew/piracy) boot into RCM, send SXOS payload through and go to emunand.
I have heard using Hekate to boot "stock" is safe for going into sysnand, but...