the /usr/portage/app-admin/secpolicy/secpolicy-0.0.1.ebuild file contains the app-admin/kdeadmin/kdeadmin-3.0-r1.ebuild file. Probably a cut&paste error. Is not clear what app-admin/secpolicy package should provide, but this is obviously wrong.
No, this is quite correct. It's part of the suspended kde parent/chldren ebuilds project. Long story, but the important thing is that it's a) masked, b) as it should be and thus c) nothing to worry about.