> It's a very standard defense-in-depth technique

Is there any software we’d be aware of which uses this technique

Windows and OpenSSL both do this