Subscriptions being displayed when they shouldn't

Hello. We have 3 subscription packages in CB Subs. We only want people to be able to sign up for these subscriptions if they are apart of a particular user group already. So we want hide it from guests and normal registered users. However if we have the plans visible on the front end, guests can see the subscription plans on the sign up page.

Here is our configuration:

Allow access from site frontend Yes, this plan is visible on the site
Visible for Access Level : Our custom access level
Manage View Access Levels Our custom user group

Are we missing something? Or does Allow access from site frontend set to Yes put the subscriptions on the front end no matter what the other 2 options are set to underneath?

The ACL works like tabs for registration and is basically ignored. You need to set "Allow registration" to "No" under the Workflows tab if you don't want them visible on registration.