If you get the cryptroot password wrong 3x3 times, you get dumped to a busybox shell. This is kinda useless/confusing for an end user who can access this shell via another means. We can fix this with a kernel commandline parameter (tries=99999).

See also https://bugs.debian.org/898495