Just a thought, but a sort of replay attack work around comes to mind. Just take a hash of system clean (unrooted without xposed) and use that hash when you need to pay. Wouldn't that work?
The problem I'm having with using it is while I can disable root easily, I can't easily get around with...