I agree with you. First the user has to install the wineprefix as user and only then the user may be able to set the security level - valid only for this wineprefix outside root. If there is no wineprefix in /root, it will then not run that easily as root and winecfg in root should not work. At the moment, if after "make install" I am forgetting to go outside root modus, the wineprefix is not created in /home/user but in root's own directory in /root and from there it can access anything.