prefer `git submodule foreach` to hacky bash