apply: verify submodule commit object name better