Now clean keyring will be prepared by qubes-builder so there will be no old kernel.org key at all (and importing revocation key for non-existing key fails).