If you are the manufacturer, who already know the root private key and can make some fake users, you still won't be able to print new money from nowhere. Yes, you CAN make double spending, but this will just split the network, because every participant will accept only one spend, not both.