How to test Secure Boot in Arria10 without programming any FUSE

The documents mention "unsecured root key" that doesn't need to be stored in the device and is supposed to be present in the boot header. But I can't find any procedure to achieve this.