That's a good catch. What should the error be, ambiguous conversion? I'm also inclined to include a keyword like `unix2date(unix_seconds; convert_to_leap=false)`, so that the user could convert to a leap second if they want, instead of completely disallowing that particular unix second just because it's ambiguous.