For rd.luks.key=keypath:keydev:luksdev, keydev being '/' will assume the initrd contains the keyfile.