@vtrefny Thank you!
That is what I was saying. So do I have to “unenroll” the FIDO USB key to get the system past boot to make the changes? Can I just remove the options at the end of crypttab? If so, couldnt an attacker just do the same thing defeating the purpose of USB key crypt?