All {dry_run} enabled rules are in dry run: they report what they would do but send no noindex header.