use http read-only access for submodules