fetch submodules by https, as this is proxy aware