I wanted to add an updated on this.
With control plane security enabled, you can pre-provision APs with the whitelist-db cpsec add mac-address command. I tested it and the APs came up with the name and group I had defined.
If you decide to disable control plane security, the APs will reboot, and after reboot they will retain the name but not the group, they will come up under the default group.
I still haven't found a way to load new APs to a different group.
Hope this helps.
Erga