Cloning should use GIT_CHECKOUT_SAFE_CREATE as a checkout strategy according to libgit2 docs