change submodule to readonly URL