I will be working on a solution on this issue this month. We are getting closer:
Selected Custom Target: [TEGRA2, 2.60V, TAP0]
Halting target...OK
STATUS: Target was already halted.
R0 = 0x00061A08 R6 = 0xAB210468 R12 = 0x000001E0
R1 = 0x00061C97 R7 = 0x000680E8 R13 = 0x4031A980
R2 = 0x000000FF R8 = 0x00061848 R14 = 0xAB1DC8C1
R3 = 0x00061CE1 R9 = 0x00000001 R15 = 0xAB1D980E
R4 = 0x00000197 R10 = 0x000002C9 CPSR = 0x80000030
R5 = 0x00000000 R11 = 0x00000000
JTAG will be the best option...

Unless someone can decrypt the RSA key for NVFlash!