Do not mark all calls to erlang:is_function/2 as safe

Calls to erlang:is_function/2 where the second is not a literal nonnegative integer can crash at runtime and thus can't be marked as safe.