Johnny Bilquist created "patch 448" which supports non-DEC MSCP devices (e.g. CMD) - https://groups.google.com/forum/#!topic/vmsnet.pdp-11/S9ZR_C_swg0
I don't remember if Don had patched Zeke up to that level but I'm sure he'll check in here shortly.
Patch 441 was sufficient to resolve the booting issues I had with CMD CQD-200/220 controllers.
Subject: libvmf,cpp,rauboot,mkstr(1) fixes, ld feature (#441) Index: usr.lib/libvmf,lib/cpp,sys/mdec/rauboot.s,... 2.11BSD Description: 1. The libvmf (virtual memory using tmp files) routines could crash or hang an application if too many locked segments were requested. 2. The C preprocessor (cpp) had a memory leak which could cause it to run out of memory _and_ also failed to check the return status of calloc() which would cause cpp to fail ungracefully. 3. The MSCP bootblock would not work with a CMD CQD220 adaptor due to the bootblock relying on the (undocumented?) behaviour of DEC adaptors. 4. In the mkstr(1) manpage the usage example given used lseek(2) incorrectly. 5. The linker (ld) does not accept the '-g' flag which on other systems says to retain debuggin symbols. 6. creat() is no longer a system call, thus it is an error to have creat(2) instead of creat(3).