I'll just leave this here ( T. Petterson, 2007, Cryptographic Key recovery from linux memory dumps ) It was the first google hit anyway.
True, also luks/dmcrypt unlock does not require VNC. Research your options, console is not required (hint: sshd in initrd). This is obviated by 1 & 3.
Easiest...