When running non performance sensitive but security sensitive code. Even adding protections summing up to much higher performance penalties can be very acceptable.

E.g. on a crypto key server. Less if it's a server which encrypts data en mass, but e.g. one which signs longer valid auth tokens or one which hold middle layer certificates which are once every few hours used to create a cert used to encrypt/sign data en mass used on a different server etc.