varnish: should be built with PIE flags

http://fedoraproject.org/wiki/Packaging:Guidelines#PIE says that "you MUST enable the PIE compiler flags if your package is long running ...".

However, currently varnish is not being built with PIE flags. This is a clear violation of the packaging guidelines.