The gnome-lokkit app includes a desktop file for
the gnome enviroment.
The desktop file just list the command as "gnome-lokkit"
so users without /usr/sbin in their paths will not
be able to start the app.
The app either should not be on the menus, or perhaps
it should use user-helper so it can run as root.
Or the desktop file should be installed mode 0700 root owned
fixed in 0.41-3 and later.