Thanks to @bertogg I had setup yubikey's FIDO authentication for my Luks decryption at boot, in Debian. Now I wonder if there's a nice plymouth UX for it.