changing submodules to read-only git protocol