You could use my yourls-repo (https://forum.cloudron.io/topic/1115/yourls-org-link-shortener-custom-app-request), add ldapauth to apache for your cloudron users and create links to your forms with yourls. If people click them, they have to auth via apache first and get forwarded after. This wouldn't be a link protection, but it would be a start 😉