It MUST be used when the key usage is authorized by the secure element managing the key itself using PIN.