Hacker News Reader

I believe that is just to disable the inclusion of the payload, the given env variable will disable the payload when it is live.

It prevents registration of the dl-audit hook, very early on. So no redirection of RSA_public_decrypt occurs.