[qubes-users] Where to run undervolt script?

What is the safest way to use undervolt script in Qubes?

This is running on Python. Is it better to use new service qube for this or can I run it in dom0/sys-net/sys-firewall?