The gnome-lokkit app includes a desktop file for the gnome enviroment. The desktop file just list the command as "gnome-lokkit" so users without /usr/sbin in their paths will not be able to start the app. The app either should not be on the menus, or perhaps it should use user-helper so it can run as root.
Or the desktop file should be installed mode 0700 root owned
fixed in 0.41-3 and later.