Version field was incorrectly labeled "process_category". This is now supported (and defaults to 0 if not present on npdm, 1 if not present on kip). process_category is alias.
Support was added for mesosphere large-address map extension (these bits are reserved in official OS).
Support was added for specifying the signature key generation, which determines modulus used to verify ACID.
Support was added for system call capabilities in range [0x80, 0xBF], which kernel allows since 11.0.0.
"title_id" (and min/max) were renamed to program_id. If program_id not present, title_id used as alias.
Splits service_access into service_host and service_access, both arrays of
strings.
We output service_host first, as that seems to be what Nintendo is doing - all
their NPDMs have service hosts before service accesses.
