sfc: enable vault repo for kernel packages