Security on Composite forms in Hyperion Planning 11.1.1.3

We have created a composite form, but it seems that users must have access to the 2 forms that comprise the Composite form, otherwise I get an error message saying "insufficient access to access the form" or something to that effect.   I want to hide the two forms that are used in the Composite, but I don't see a way to do that and still maintain access to the Composite form.   What am I missing?  I've tried putting the forms in a different folder and not granting access to the folder, but with access to the forms, in 11.1.1.3, automatically