disable vendor module security check

This is just plain stupid

Change-Id: Ia78f96006a1cacf8ab9238825bf49351daadfa19
core: config: reconcile CFLAGS for various compiler cases