I have my pepper spray clipped to a strap on my top tube. The strap is extra security so my frame pump will not fall off when hitting a pothole, crossing railroad tracks, etc.
In my opinion if it is zipped up in a bag you will never be able to get to it when you need it most.