gitmodules should use the read-only urls.