Since enabling dynamic auth I’ve noticed a distinct new sluggishness to the UI (community edition 7.2) so ran a little experiment …
I’ve pre-compiled all the dynamic rule files and added a JAR containing them to the bonita webapp. Then a minor change to the PermissionServiceImpl class to avoid any dynamic load/unload - and Wow! the speed improvement is amazing. Oh the joy of open source! 
It got me thinking: why is there dynamic loading of these classes at all when the “setup.sh push” command says you need to reload after making changes anyway? Seems like an un-needed (and damaging) feature.