My workaround for this problem was to use non encrypted USB flash drive for EFI and /boot partitions. It also contains encryption keys, main reason was to avoid

My workaround for this problem was to use non encrypted USB flash drive for EFI and /boot partitions. It also contains encryption keys, main reason was to avoid entering passwords. Works pretty well, only problem kernel upgrade fails if usb key is not mounted. When I travel, there is no way to decrypt my computers, since keys are with me. When I arrive home, I insert keys, start all computers, upgrade packages (automated), remove keys...