But then the new Qubes release they are (we) waiting for is here. Missing package in dom0 (systemd-cryptenroll)