Comment # 4 on bug 917427 from Neil Rickert

>Could you show "grub2-probe -t abstraction /boot"?

# grub2-probe -t abstraction /boot
cryptodisk luks gcry_rijndael gcry_rijndael gcry_sha1 lvm

Since you need a fixed image that works for all users of secure-boot, I guess
you would need to include all of the likely crypto.