git does not actually lock git submodule at a tag