One thing we couldn't figure out from the documentation is encrypted root with serial console: https://prgmr.com/blog/openbsd/2020/05/08/openbsd-encrypted-... I have gotten it on someone's TODO list to upstream that work though it hasn't happened yet.