the way autoppa invokes debuild interacts badly with debsign. In my case, the passphrase I enter goes directly to the screen rather than to the gpg password prompt.
Bug watches keep track of this bug in other bug trackers.