Well, that's arguable: I think root should be able to shoot itself in
the foot by doing step 3. Generally we don't restrict what root can
do. OTOH I agree that current behavior is ugly in that it provides
different semantics for privileged/non-privileged callers.
Perhaps it would be cleaner to simply not allow step 4, instead of
playing tricks with changing the propagation type.