We cannot have -Werror for third-party submodules because
whenever they break the build we cannot fix it as needed.