Don't rely on PKI when updating submodules