You have to unpack the system partition and Mount it as a loop device, insert su binaries while unpacked, repack it and format it with ext2img and flash it when system.img has the proper su files in it.
or you can unpack boot img, set ro.secure=0 in defaut.prop repack it, flash it, start an adb shell to push su files in /system partition before rebooting