Use read-only submodules URLs