you are right, it is not a good idea to rely on hibernate.hbpm2ddl.auto="update" to automatically do the tricky database updates for you
see this discussion:
http://stackoverflow.com/questions/221379/hibernate-hbm2ddl-autoupdate-in-production
there are better tools for database updates:
http://www.liquibase.org/