Perhaps people from NBDE or systemd could help with proper configuration. This has little to do with (lib)cryptsetup