Yes, it works on my WP 3.6, but:
- The categories are not shown as tree but as a plain list.
- I use CaPa Project (Version 0.5.8.2). The categories that should not be visible by a visitor role are indeed displayed on my mobile phone. When clicked on them a message is displayed that the posts are not allowed to be seen, or posts from other categories appear in them.