Scalable Parametric Verification of Secure Systems: How to Verify Reference Monitors without Worrying about Data Structure Size