Always use HTTPS for submodules