Use read-only URLs for submodules