Per man sign.conf
logfile: filename
Log requests to the specified filename instead of stdout.
Currently, this option works only for signd, but it would IMHO be a good idea to implement support for sign as well (i.e. we may want to log what server is signing our packages).