When the SASSSECx internal security is updated/changedm, can we do a /REFRESH MOD=SASSSECI to load the new security module, to avoid recycling CA 7?

Release : 11.3, 12.0 and 12.1

Component : CA-7

No, you must recycle CA 7 if you change the internal security module. You can not dynamically reload it. 

We recommend using external security to control access  to CA 7. When using external security and you make a change, you do not have to recycle CA 7. If you are using RACF security, you will have to make a change to CA9SAFC in CA Common Services.