Note on submodule udpate without cert