Put the unencrypted app on the stick and encrypt the rest of the stuff.