I would think playing with the knock sensor inputs would the easiest and have the most predictable results. As far as I can tell when knock is detected the ECU retards the ignition without affecting anything else. This is the problem with trying to trick the ECU in to certain behavior; you really need to know how they programmed the interaction between all the maps. I'll have a look into it.