What if the nameserver disallows this dig? Is there a backup plan for determining all zone records?

Here is an example of what I mean by the NS disallowing the dig:

gavin@ubuntu:~/Desktop$ dig google.com NS

; <> DiG 9.6.1-P2 <> google.com NS
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 50018
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;google.com. IN NS

;; ANSWER SECTION:
google.com. 5 IN NS ns4.google.com.
google.com. 5 IN NS ns1.google.com.
google.com. 5 IN NS ns3.google.com.
google.com. 5 IN NS ns2.google.com.

;; Query time: 35 msec
;; SERVER: 192.168.242.2#53(192.168.242.2)
;; WHEN: Mon Jan 17 12:43:36 2011
;; MSG SIZE rcvd: 100

gavin@ubuntu:~/Desktop$ dig @ns1.google.com google.com AXFR

; <> DiG 9.6.1-P2 <> @ns1.google.com google.com AXFR
; (1 server found)
;; global options: +cmd
; Transfer failed.