You simply send a pulse in the middle to stop the servo, adjusting the now disconnected preset resistor till the servo stops, a shorter pulse to go one way, and a longer pulse to go the other. You can get a limited amount of speed control by only moving slightly either side of the stop pulse width.