Switch submodule to read-only HTTPS