Hi Vagrant, this patch will include the luks2 module into the grubx64.efi file, which gets chainloaded from the signed shimx64.efi. The grubx64.efi eventually should get signed by the Debian CA and packed into grub-efi-amd64-signed.
Best regards Marc