If a user uses dracut with systemd and wishes to modify the options passed to password-agent(8mandos) or mandos-client(8mandos), they should be able to do so by simply creating a file /etc/systemd/system/ask-password-mandos.service.d/override.conf, containing, for instance:
Adding PASSWORD_AGENT_OPTIONS should also be possible (but should not normally be needed).
* dracut-module/ask-password-mandos.service ([Service]/ExecStart): Add $PASSWORD_AGENT_OPTIONS before "--" and "$MANDOS_CLIENT_OPTIONS" to end of line. * dracut-module/module-setup.sh (install): Install all files named /etc/systemd/system/ask-password-mandos.service.d/*.conf if any exists. Also add --dh-params before $MANDOS_CLIENT_OPTIONS instead of at end of line.