The workflow for users typically looks like this:

If you installed a game without a key, you can add it later:

Without the correct zRIF key, the .pkg file is essentially digital gibberish to the emulator. The key is the bridge that turns encrypted data into a playable game.