Handle corner case where a leaf splits into too many new leaves

[ajhconway]

This is extremely unlikely to happen in practice, but if a leaf split into 24 new leaves, this would trigger an assertion failure. We should handle this somehow.

[rtjohnso]

Leaf splitting code totally rewritten in #618, which theoretically allows arbitrarily large splits.