You should set group ownership in %files section too:
%attr(0755,root,katello-shared) %{_sysconfdir}/katello/secure