It would be nice if root privileges were not needed to build the spiflash images. I would thus recommend using https://github.com/pengutronix/genimage to avoid this requirement :)