How do you secure your forms?

We are having trouble keeping our form security locked down appropriately. The only way we seem to be able to apply security to a single form without causing other forms to appear is to put every form in their own folder and add security to the folder. What i would like to know is how you manage your form security? If we create a new self-service form for union A, we would like to house it under Self Service > Forms, so that all self service forms can be in one place but security would limit what you actually see. So what's your business process for adding a new form?