Use https for submodules

tested by hand