Submodules use https, so don't need ssh key