Good luck!

Thanks for your post. Yeah I’ve done encrypted OS partitions myself and it’s worked fine - it’s asked for the password. This was a bit different because I was needing something unlocked that - as far as the boot loader was concerned - was not needed for boot. I did find the solution though - see my edit in OP above.

Thanks, I solved it by RTM-ing, see edit.

Debian!