Dont know much about that crypt stuff. But it looks like the timeout in crypttab is one thing, a to-be-added timeout in the generated .service files is another thing. Looks like systemd does not fully understand the crypttab format.