What is the best way to allow this vendor to spoof your domain?
1) Add the vendor's SPF record to your domain's SPF record
2) Remove the vendor's SPF record from your domain's SPF record
3) Create a separate SPF record for the vendor's domain
4) Block all incoming emails from the vendor's domain