This does seem like a common need, but my guess is since you are encountering it that it will not be easy to just resolve. Umbraco would need to know when to check for both an umbraco cloud authentication and a member authentication. Umbraco would need to have cookies setup to handle both. Can you enable public access, but use a publicly unavailable domain name for accessing the front facing website?