use readonly URL for git submodule