Use read-only url for submodules