Dom0 compromized? Just swap it with an uncompromized version from the repository

Split this topic from the original conversation as I felt it could have its own life.