Using "By URL Part" protection to protect an entire URL you can pretty much protect anything. So, yes; simply protect the URL parts to the chronoform or the Joomla menu link to it. If the form is embedded into a Joomla article though then you'd have to protect the article it self.