Dom0 have no keys for verify every signature, so resign packages with Qubes keys (after verifying other signatures).
Based on rpmfusion packages. This script downloads needed packages and rebuild kernel module for Qubes dom0.