For all active cryptsetup/luks/whatever discs
whose key is not random (such as in

# <target name>	<source device>		<key file>	<options>
cswap           /dev/vg-tglase/lv-swap  /dev/random     cipher=aes-xts-plain64,size=256,discard,plain,swap

in /etc/crypttab), check on shutdown that the admin knows the password.

Do this independent on whether logged in via SSH or not, do it always.

Aus Gründen™. (For Reasons™.)