This is one of those scenarios that I’m noting because it might bite someone, some day: if your root partition is encrypted, you can’t fit in a different keymap.  However, kernel options to build in a different keymap will fix this issue.