Necessary steps to make my CIAs work on plain sysnand?

I know there's a way to do it. I just can't remember the method... something involving ticket.db...
I read the "What is a legit CIA" sticky, but there was no info about it. Just stuff to do with signatures. (which I'm thinking I have to patch to get them working on plain sysnand).

If someone can point me in the right direction, I'd be very greatful.

Thanks.