Use HTTPS for all submodule sources