Using posix file capabilties you can give wine only root permissions for creating raw sockets. A lot of distributions are doing something similar these days for ping which also required complete root permissions before.