diff --git a/tools/gpg-authcode-sign.sh b/tools/gpg-authcode-sign.sh
index 35a0f3827..91e33bcec 100755
--- a/tools/gpg-authcode-sign.sh
+++ b/tools/gpg-authcode-sign.sh
@@ -24,6 +24,7 @@ Options:
         [--url=STRING]    Include STRING as URL (default=$url)
         [--stamp]         Use a stamp file to avoid double signing
         [--dry-run]       Do not actually run osslsigncode
+                          (same as GPG_AUTHCODE_SIGN_MODE=disable)
         [--template]      Print a template for ~/.gnupg-autogenrc
         [--version]       Print version and exit
 EOF
@@ -183,6 +184,9 @@ if [ ! -f $autogenrc ]; then
     exit 1
 fi
 
+[ "$GPG_AUTHCODE_SIGN_MODE" = "disable" ] && dryrun=yes
+
+
 # Define the cleanup routine for osslsigncode
 cleanup()
 {