Let Varnish logic set TTL on 4xx, but cap at a configured TTL

Change-Id: I82ee313e967efd94f07ef26e19ad36915dbc4a57