Multifile support for security specifications

While using Stoplight Studio I have been unable to get security specifications to limit rendering all of the scopes for each API endpoint despite only a few being required. I am not sure why the $ref in the components section is not working in this way as it appears able to access them at runtime. Anyone have a solution to this or is it a bug to be addressed in future releases?