In order to support newer and more robust EHCache releases, including distributed caches, Spring Security needs a bit of work. EHCache maven artifacts have been split up into modules, but 3.1.0.CI-SNAPSHOT compiles nicely against just net.sf.ehcache:ehcache-core:2.4.0. It does break unit tests, as the tests make assumptions about the behaviour of the default cache store that are no longer true (e.g., constructor behaviour, flush behaviour).
I had good results in EhCacheBasedAclCacheTests by doing
cacheManager.addCache(new Cache("ehcachebasedacltests", 1, true, false, 600, 300));
and adjusting the assertion to match a memory store of 1 element, instead of 0. Not sure what to do about the last few tests that would work against 1.4.2+ and 2.0.0+.