The ability in --verify or an alternate argument to also verify nca signatures and not just hashes. I had a few files sneak by in automation that were XCI->NSP conversions. they passed in this tool, but checking them in NXfileViewer, failed signature test. (as well as DBI and Tinfoil).