Enabling Server Side Includes Safety

I want to enable our server ssi server side includes (.shtml parsed).

My hosting company controls our server uptime, daily backup, server loads etc. when i request them; can you please enable ssi for shtml pages, i want to use ssi includes etc.. they suggested me use php instead of shtml for includes.

I want to .shtml, beacuse i use only ssi include header, footer same pages, also these pages search engine friendly.

Apache version: 2.0.52

I posted them please add following lines and restart apache afterwards:

Options +IncludesNoExec
AddType text/html .shtml
AddOutputFilter INCLUDES .shtml

They added and restarted apache, but not any affect. When i access .shtml pages via web browser, page opening successfully but not parse ssi includes, example:

<!--#include file="header.html" -->

but not parse, also i cannot use .htaccess files, our server admin say restricted them because security reasons.

I requested them our server root username and password, they say to me; before give you server root password, we remove all our server administration software from server and server administration service will be cancelled.