Hello!
I need to pull submodule from private Bitbucket repository and facing similar issues - having to dance around ~/.ssh/known_hosts, configure another SSH key despite already having Bitbucket integration up and working, and so on.
It all could be solved if I could configure clone step to add a --recurse-submodules flag, really.