I have been thinking about this - see the drawing below.
- If there is access to the switch contacts in the keyfob, then the upper path could be used with a cheap RF remote control to parallel that vague switch, including doing precise timing of the bursts.
- If that is not available, then...