hi george.
as far as i can guess, you put 2 real folders, and that's right, but both in the root, that's wrong.
Indeed, the 2 real folders is the smartest solution, but nested.
I'll try to explain, solution is bottom.
The first actually provide access.
the second will provide access too, yes, but to things that would already be accessible by the first.
Indeed we are adding the second just to tell HFS to protect that specific subfolder (other subfolders will be unprotected, as usual).
so move "meonly" to be inside "clickme" in your virtual file system.
this will likely solve your problem.