pub fn system_clock() -> WallClock
The real wall clock — the ONE place system time enters this crate, and only ever by explicit caller opt-in.