Within class SecurityContextCallableProcessingInterceptor field securityContext should volatile. Fixes gh-6143