When I run cache:warmup command with existing cache, \Symfony\Component\Config\Builder\ConfigBuilderGenerator build SecurityConfig without any listeners configs (e.g. \Symfony\Config\Security\FirewallConfig\FormLoginConfig). This is because ConfigBuilderGenerator call SecurityExtension::getConfiguration without first execute SecurityExtension::addSecurityListenerFactory (that only executed in Bundle::build).

It seems like a bug and CacheWarmupCommand should call kernel reboot method before calling CacheWarmerAggregate::warmUp. The same thing actual for CacheClearCommand and case when cache is fresh.