Granular level permissions for forms

Currently any of our employees with Nintex access can view any Nintex form, even forms designed for exclusively for HR or Finance. We want to more easily be able to restrict access to forms (or parts of forms) based on group membership or other factors. Examples factors: AD Group membership, AD Department or Job Title, SharePoint Online group membership, Office 365 group membership, Okta profile attribute, Nintex group membership, or other identifying property. Currently all the suggested workarounds (such as relying on the permissions of the connection or data source) is not practical.