use the read only url for submodules