Use the liquid template engine since it is designed to be securely used
by users to modify template files themselves.

Add a render_score_limit so that a user cannot take up all server
resources by writing a template that requires a lot of resources to
render.