clone: teach --recurse-submodules to optionally take a pathspec