I noticed there is now an option to build the initrd with systemd and control which units to include. The cryptsetup-generator is mentioned as an example. Does anyone know if this enables TPM unlocking of LUKS volumes that have a TPM key enrolled via systemd-cryptenroll?

Yay! Thanks to all the contributors!