Could be the rom itself.I have and still I get CTS Mismatch. Maybe because I have xposed installed
I'm currently using Alexis' Nougat Rom 2.1 and I'm only passing basic integrity on March 1st security patch. However when I 'temporarily' tested Griffin's Nougat Rom that was also on March 1st security patch, I passed no problem.