I think that's OK: when the user responsible for the page is looking at it, the form could include fields for those non-public things. When it's someone who isn't responsible for that page, then it won't.