How to prevent Smarty secure_mode activation?
Allowing arbitrary php to be executed from an email string can potentially cause security issues from un-trusted users and hence the security mode of smarty is enabled for all string based resources.

I dont think there is an easy work-around for this :(