I was hoping that systemd's soft reboot function would help a lot here. It would make it unnecessary to request password when using full disk encryption and would require less downtime. Last I checked it didn't work in Silverblue though.