make submodule readonly