You can easily put the folder containing your self-contained app inside a secure, encrypted volume on the USB drive itself.