There is a wrong package name about VisibilityController in mentioned section: it should be org.apache.hadoop.hbase.security.visibility.VisibilityController instead of org.apache.hadoop.hbase.security.access.VisibilityController.
A wrong slash: org.apache.hadoop/hbase.security.access.AccessController
VisibilityController should not be in hbase.coprocessor.regionserver.classes which will fail rs starting up.