Add vault-cipher as a submodule to fix CI