Remove old vesting code.

Looks like the old way of vesting without a permissions check snuck back in somehow ...