I know that well. Afaik D9 still didn't get updated to provide keys manually and set them through (just looked at the git).d0k3 (or mid-kid, I don't remember) said that you can't decrypt using the 3ds itself that early on boot, but you could provide the needed keys to do the work.