deploy a vault first before creating sub-accounts.