Hello!
Previously we have been requested to support WebSecurityConfigurerAdapter#configure methods reloading and the ticket is currently in a backlog. Other than that, JRebel should work well for Spring Security framework.
If you have any use-case where JRebel is not reloading your files, feel free to send trace jrebel.log after reproducing the issue to support@zeroturnaround.com
About sending logs: https://manuals.zeroturnaround.com/jrebel/misc/sendinglogs.html#sending-logs