What does the "Vary: Cookie" header actually do for serving pages from Varnish?
To answer my own question. I've found that with $conf['omit_vary_cookie'] = TRUE;, users who visit a page as anonymous users and log in will see the cached version of the page until they click "refresh" on their browsers. It is a subtle difference that I didn't notice at first as  admininistrator user.