There's a point that eludes me: to decrypt all that stuff you need to provide your code the password. If you store it in code, well, it's there. If you download it at runtime from a server, decompiling your code gives hints on how to download it anyway. So, how secret it's the secret?
You could adopt a steganography-like method to hide it, but will it suffice?