I may have mislead you here: we probably do want `git submodule sync` (to make sure the submodule URLs in `.git/config` match the ones from `.gitmodules`), but it's more important to run `git submodule update --init` afterwards so that the submodules actually get cloned the first time the script is run.