base-files: allow failsafe to configure vlans