FAS is enabled at the Store level as well. If you want to run both for different delivery groups (essentially different user personas), you would need dedicated stores for each authentication method. What you make available behind that store can be configured with Keywords and Storefront settings, where you can hide desktops or published apps by including or excluding keywords. (there are probably other methods as well)