One way to do it would be to remove the link to events.asp in your inc_top file (or wherever you have it and instead add it as a URL to one of your forum categories and set the Auth Type to Allowed Members List, just like a private forum. Not a perfect fix but definitely the easiest as it doesn't require any file editing.