The obvious solution is of course to compress the binary inside with bzip2, then compress the zip with xz, so the googlebots can't figure out how to read it.
Then for good measure the zipfile itself should be password-protected, and the password should only be available on another site.
Since the necessary tools are already installed on a Mac, everyone wins!
