Spring RCP and Spring Security fit together perfectly. You can secure commands so that only authorized persons are allowed to do a certain action for example.
Can you elaborate on Hibernate Rich Client? I haven't heard of such a project. If you mean Hibernate to be used in the backend, you can use Spring ORM to integrate Hibernate into your application.
As for maven, Spring RCP provides an archetype that creates a skeleton application from which you can build on.
MSN: PM me please
Skype: doclo_lieven
Spring Rich Client Project Lead