The KISS technique is manual payouts on pull back (which occur after the player needing to pull back executes a CONSUME or GIVE; I'd recommend GIVE to the store as this stays away from the need to ever make new M tokens). That can be made more secure with multisig (at least two individuals need to support blockchain installments).