diff --git a/internal/subscriptions/domainperms.go b/internal/subscriptions/domainperms.go
index 121647732..7c5e2c6c7 100644
--- a/internal/subscriptions/domainperms.go
+++ b/internal/subscriptions/domainperms.go
@@ -238,7 +238,7 @@ func (s *Subscriptions) ProcessDomainPermissionSubscription(
 	// Call the URI, only force
 	// if we're doing a dry run.
 	resp, err := tsport.DereferenceDomainPermissions(
-		ctx, permSub, !dry,
+		ctx, permSub, dry,
 	)
 	if err != nil {
 		// Couldn't get this one,