For now, the unfortunate status is: Don’t expect that anyone will be able to suggest a solution. Too difficult. Most likely nobody will known.
When ISO: Change to unencrypted /boot if using Full Disk Encryption gets implemented, this issue won’t happen again for new installations.