sys-kernel/zen-sources sets RESTRICT="binchecks strip primaryuri mirror" before inheriting kernel-2. kernel-2.eclass ifself sets RESTRICT="binchecks strip", so the additional restrictions are lost. Why does zen-sources need the additional restrictions?
It doesn't need them (it didn't use them all this time anyway), so we removed them. Thanks for pointing it out.