so I've not seen anyone mention this,but legit cias have a legit universal signature and so also the ticket that gets sent to Nintendo is correct. Although not every title has a legit cia,but for example,pokemon and smash have their own legit cias,so does mario kart7. I think this could be a starting point to bypassing the online 11.8 security checks.