Crypto kernel modules cleanup (#468804)

nixos/modules/system/boot/luksroot.nix

@@ -647,6 +647,8 @@ in
         "sha512"
         "af_alg"
         "algif_skcipher"
+        "cryptd"
+        "input_leds" # for capslock LED on most keyboards in case decryption requires password
       ];
       description = ''
         A list of cryptographic kernel modules needed to decrypt the root device(s).
@@ -1135,8 +1137,6 @@ in
     boot.initrd.availableKernelModules = [
       "dm_mod"
       "dm_crypt"
-      "cryptd"
-      "input_leds"
     ]
     ++ luks.cryptoModules
     # workaround until https://marc.info/?l=linux-crypto-vger&m=148783562211457&w=4 is merged