>>But what if I want to specify the root directory for any of these? What do I put in? Seems like an empty string should indicate the root folder:

It should be

 

<security name="FilesGalleryPath">/</security>