Shielded transactions in Zcash continuously expand a nullifier set required to prevent double-spending attacks