Separate the permissions for profile forms and profile listings

I want users of my site to be able to fill out profile forms for donations, volunteer groups, events and so on but NOT have access the the profile listings. Even if you create redirect pages and hide the 'profile' path, anyone with knowledge of CiviCRM url patterns can find group listings.