Team Calendar restrictions do not apply if the calendar is in a Calendar Macro withing a Confluence page.
Create a calendar.
Restrict it to one group.
Create a Confluence page with a calendar macro containing the restricted Calendar.
View the page with a user with no permissions to see the calendar.
This bug affects new calendars and also existing calendars after the upgrade to Team Calendar 4.2+.