You have to secure the hell out of bitcoind. If you can't then just give new users pre generated bitcoin addresses in their welcome msg and do all transactions offline manually. Much safer

Or sit on jabber and take escrow