vcl_pass might return fetch, not pass

Spotted by: coredump