use read-only for git clone