Change
	return (hit_for_pass)
to:
	set beresp.do_pass = true

It was wrong to make hit_for_pass a return action, because it is not.
It is a flag on the cached object, and that is all it is.

With streaming becoming the default, having it as return-action would
make writing vcl_fetch{} more cumbersome.