Update: After a power-cycle, this process worked without setting

boot_unlocked

... I was worried for a moment there.