Use specific commit hash for VEP install to handle updates to scripts within a release