pathspec: only match across submodule boundaries when requested