Okay so I've got something that works pretty well. It checks for the SMFCookie132 cookie and, if it finds it, it deletes ALL the cookies. Varnish will serve cached objects if there are no cookies.
Code:
# recv
sub vcl_recv {
# if SMFCookie132 is not there...
if ( ! req.http.cookie ~ "SMFCookie132") {
# kill ALL cookies
unset req.http.Cookie;
}
}