I'm not sure on how many "security" measures the 3DS has, other than checking the card to see if it has blacklisted ID...
The real trick (as I'd imagine) would be getting the content of the cards, then forcing the 3DS to load a game... Everything else is just a matter of creativity on the...