csrutil modifies System Integrity Protection settings. Some of the commands require the device to be booted into the Recovery OS.