On higher security networks, I've used this method. It also works for school districts looking to secure their DBs from wannabe student hackers changing grades (yes, I've seen it attempted).