We use shamir to be able to activate a special internal service. We at least need to person to activate it. Also Hashicorp Vault (and forks) are using it to seal/unseal the cluster.