You can't. The only way is to jtag an allcam patch to allow you to use a funcard/titanium card with the keys loaded on the card. That's how I used to do it, but that's ages ago.
Don't think there's much happening now with the Simba, try
_www.aston-team.net/
for various patches, you'll need a jtag interface for uploading patches ( no serial port on the Simba, has to be through the RJ45 port).
Llew