Use public HTTPS repositories for submodules, so that everyone can check them out.