better always use https for the submodules...