Just get your /admin-system to send the correct Cache-Control headers, Varnish will respect the headers, and serve it correctly.