Would just like to make it clear that the backup loader does in fact work fine, however, it only works on a Development Console, not a retail unit!
So installing a Test firmware on a retail console wont help? Is the hardware different on a Development Console?
Development Console= Retail Console with test firmware?
Because you don't have signing (encryption) key, you cannot write those flags
It is depending on how the encryption is, e.g. if the part which is configuring the hypervisor, is the same on all test firmwares, you can just copy the right code and place it in the retail firmware.
I would like to know if this loader needs to read some data from the game files in order to launch the backup or if it already can load all backups. Also which format can the Backup Loader read yet?