I ran across your bot on twitter (I periodically search for likely outputs from trading bots on twitter so keep tabs on the 'opposition'); this looks like a pretty competent outfit. If I ever find a bot that I think's better than mine, I'd cheerfully switch to using it.

Given that you are going to be opening it up to users, presumably users will simply have to trust you with their API keys?