Cloudcontrol routing tier (*.cloudcontrolled.com) is handling also GA universal cookies from today. Please have a look at simple examples:
http://classic-gacachingtest.cloudcontrolled.com/
http://universal-gacachingtest.cloudcontrolled.com/
What is interesting official varnish documentation suggests using the rule which will handle all types of GA cookies but will also strip other types of cookies as well if only they start with "_" which is not so cool.