Found it
That was very hard to find and not at all explained anywhere in the varioous documents or help that I could find. The Form Builder interface itself is ... erm ... not very good.
Even better would be to separate Captcha out from the Form Builder product if possible. It's enough of an issue for enough people to warrant a separate product.
IMHO