One reason to do denormalization is speed. If many/most of my reports do not require the credit card fields, you don't' drag them into memory. The security aspect is also there, especially if you have those fields encrypted to begin with and you should damned well have them encrypted even to the dBA's and dBE's.
Biting the hand that feeds IT
