Secure, non-evaling end user template engine
