For Code signing to get skipped, I have to use CODE_SIGN_IDENTITY="" as well.

I am going to build on different machines. I will manually download the new WWDR intermediate certificate.