all submodules should use https