Locked down form-related fragment actions so that they use KenyaUI's app security model