Describir: Verified Configuration of Programmable Networks