Do you use systemd-cryptenroll for this?
Fill in the blank.