Never mind, I found it. I had the userpriv flag in FEATURES, causing all compiles to run as the portage user.
Packages that require root during this stage should be blocked instead.
I would like to second that motion. I spent hours looking for this simple line. Admittedly, I set portage to ...