Our system can utilize it's TPM2 to automatically decrypt. This can be done because the bootchain is secure and it's a bit tedious to enter an encryption password everytime the system boots up.
First off the packages `clevis` and `tpm2-tools` have to be installed: