cleanup a bit + add restrict vendor files flag

and use for now prebuilt kernel with our build system

Change-Id: I6ff80c4f53d6e4308e131425e4b05e130f98258b