diff --git a/conductr_cli/__init__.py b/conductr_cli/__init__.py
index 0502704..3e7f920 100644
--- a/conductr_cli/__init__.py
+++ b/conductr_cli/__init__.py
@@ -1,1 +1,1 @@
-__version__ = '1.2.20'
+__version__ = '1.2.19'
diff --git a/conductr_cli/conductr_backup.py b/conductr_cli/conductr_backup.py
index e8d3d3f..04b515d 100644
--- a/conductr_cli/conductr_backup.py
+++ b/conductr_cli/conductr_backup.py
@@ -61,12 +61,18 @@ def backup(args):
             backup_agents(args, backup_directory)
 
             compress_backup(args.output_path, backup_directory)
-
     finally:
         remove_backup_directory(backup_directory)
+    return True
 
 
 def compress_backup(output_path, backup_directory):
+    log = logging.getLogger(__name__)
+
+    if sys.stdout.isatty() and output_path is None:
+        log.error('conduct backup: Refusing to write to terminal. Provide -o or redirect elsewhere')
+        sys.exit(2)
+
     output_file = open(output_path, 'wb') if output_path else sys.stdout.buffer
     with tempfile.NamedTemporaryFile() as zip_file_data:
         with zipfile.ZipFile(zip_file_data, 'w') as zip_file:
diff --git a/conductr_cli/license.py b/conductr_cli/license.py
index e707834..debfd53 100644
--- a/conductr_cli/license.py
+++ b/conductr_cli/license.py
@@ -3,6 +3,7 @@ from conductr_cli.conduct_url import conductr_host
 from conductr_cli.exceptions import LicenseDownloadError
 from dcos.errors import DCOSHTTPException
 import arrow
+import base64
 import datetime
 import json
 import logging
@@ -32,7 +33,10 @@ def download_license(args, save_to, use_cached_auth_token):
     if not auth_token:
         auth_token = license_auth.prompt_for_auth_token()
 
-    auth_header = {'Authorization': 'Bearer {}'.format(auth_token)}
+    auth_token_b64_bytes = base64.b64encode(bytes(auth_token, 'UTF-8'))
+    auth_token_b64 = auth_token_b64_bytes.decode('UTF-8')
+
+    auth_header = {'Authorization': 'Bearer {}'.format(auth_token_b64)}
     response = requests.get(args.license_download_url,
                             headers=auth_header,
                             verify=args.server_verification_file)

`conduct backup` prints to TTY
When using `conduct backup`, it should do a TTY check similar to this to ensure that we don't print "garbage" to the TTY:

https://github.com/typesafehub/conductr-cli/blob/master/conductr_cli/bndl_main.py#L34-L36

So I'd expect behavior like this:

Failure:
```bash
$ conduct backup
conduct: Refusing to write to terminal. Provide -o or redirect elsewhere
-> 2
```

Success:
```bash
$ conduct backup > my-file
-> 0
```
diff --git a/conductr_cli/test/test_license.py b/conductr_cli/test/test_license.py
index 92f8acf..f27911c 100644
--- a/conductr_cli/test/test_license.py
+++ b/conductr_cli/test/test_license.py
@@ -14,6 +14,7 @@ import tempfile
 
 class TestDownloadLicense(CliTestCase):
     cached_token = 'test-token'
+    cached_token_b64 = 'dGVzdC10b2tlbg=='
     license_text = 'test-license-text'
     license_download_url = 'http://test.com/download'
     server_verification_file = 'test-server_verification_file'
@@ -47,7 +48,7 @@ class TestDownloadLicense(CliTestCase):
         mock_get_cached_auth_token.assert_called_once_with()
         mock_prompt_for_auth_token.assert_not_called()
         mock_get.assert_called_once_with(self.license_download_url,
-                                         headers={'Authorization': 'Bearer {}'.format(self.cached_token)},
+                                         headers={'Authorization': 'Bearer {}'.format(self.cached_token_b64)},
                                          verify=self.server_verification_file)
         mock_save_auth_token.assert_called_once_with(self.cached_token)
         mock_save_license_data.assert_called_once_with(self.license_text, self.license_file)
@@ -57,6 +58,7 @@ class TestDownloadLicense(CliTestCase):
         mock_get_cached_auth_token = MagicMock(return_value=None)
 
         prompted_token = 'prompted-token'
+        prompted_token_b64 = 'cHJvbXB0ZWQtdG9rZW4='
         mock_prompt_for_auth_token = MagicMock(return_value=prompted_token)
 
         mock_get = self.respond_with(200, self.license_text)
@@ -76,7 +78,7 @@ class TestDownloadLicense(CliTestCase):
         mock_get_cached_auth_token.assert_called_once_with()
         mock_prompt_for_auth_token.assert_called_once_with()
         mock_get.assert_called_once_with(self.license_download_url,
-                                         headers={'Authorization': 'Bearer {}'.format(prompted_token)},
+                                         headers={'Authorization': 'Bearer {}'.format(prompted_token_b64)},
                                          verify=self.server_verification_file)
         mock_save_auth_token.assert_called_once_with(prompted_token)
         mock_save_license_data.assert_called_once_with(self.license_text, self.license_file)
@@ -102,7 +104,7 @@ class TestDownloadLicense(CliTestCase):
         mock_get_cached_auth_token.assert_called_once_with()
         mock_prompt_for_auth_token.assert_not_called()
         mock_get.assert_called_once_with(self.license_download_url,
-                                         headers={'Authorization': 'Bearer {}'.format(self.cached_token)},
+                                         headers={'Authorization': 'Bearer {}'.format(self.cached_token_b64)},
                                          verify=self.server_verification_file)
         mock_save_auth_token.assert_not_called()
         mock_save_license_data.assert_not_called()
@@ -128,7 +130,7 @@ class TestDownloadLicense(CliTestCase):
         mock_get_cached_auth_token.assert_called_once_with()
         mock_prompt_for_auth_token.assert_not_called()
         mock_get.assert_called_once_with(self.license_download_url,
-                                         headers={'Authorization': 'Bearer {}'.format(self.cached_token)},
+                                         headers={'Authorization': 'Bearer {}'.format(self.cached_token_b64)},
                                          verify=self.server_verification_file)
         mock_save_auth_token.assert_not_called()
         mock_save_license_data.assert_not_called()
@@ -138,6 +140,7 @@ class TestDownloadLicense(CliTestCase):
         mock_get_cached_auth_token = MagicMock(return_value=None)
 
         prompted_token = 'prompted-token'
+        prompted_token_b64 = 'cHJvbXB0ZWQtdG9rZW4='
         mock_prompt_for_auth_token = MagicMock(return_value=prompted_token)
 
         mock_get = self.respond_with(200, self.license_text)
@@ -157,7 +160,7 @@ class TestDownloadLicense(CliTestCase):
         mock_get_cached_auth_token.assert_not_called()
         mock_prompt_for_auth_token.assert_called_once_with()
         mock_get.assert_called_once_with(self.license_download_url,
-                                         headers={'Authorization': 'Bearer {}'.format(prompted_token)},
+                                         headers={'Authorization': 'Bearer {}'.format(prompted_token_b64)},
                                          verify=self.server_verification_file)
         mock_save_auth_token.assert_called_once_with(prompted_token)
         mock_save_license_data.assert_called_once_with(self.license_text, self.license_file)

pip install -e .
parse_log_pytest
pytest
pytest
3.5.2
pytest --no-header -rA --tb=line --color=no -p no:cacheprovider -W ignore::DeprecationWarning
argcomplete==3.1.2
arrow==1.2.3
attrs @ file:///opt/conda/conda-bld/attrs_1642510447205/work
boto3==1.23.10
botocore==1.26.10
certifi==2021.5.30
charset-normalizer==2.0.12
colorama==0.4.5
-e git+https://github.com/typesafehub/conductr-cli.git@2df68846f22c4ab568e7430d19920617e52d0d62#egg=conductr_cli
idna==3.10
importlib-metadata @ file:///tmp/build/80754af9/importlib-metadata_1631916693255/work
iniconfig @ file:///home/linux1/recipes/ci/iniconfig_1610983019677/work
jmespath==0.10.0
jsonschema==2.6.0
more-itertools @ file:///tmp/build/80754af9/more-itertools_1637733554872/work
packaging @ file:///tmp/build/80754af9/packaging_1637314298585/work
pager==3.3
pluggy @ file:///tmp/build/80754af9/pluggy_1615976315926/work
prettytable==0.7.2
psutil==5.9.8
py @ file:///opt/conda/conda-bld/py_1644396412707/work
Pygments==2.14.0
pyhocon==0.3.35
PyJWT==1.4.2
pyparsing @ file:///tmp/build/80754af9/pyparsing_1635766073266/work
pyreadline==2.1
pytest==6.2.4
python-dateutil==2.9.0.post0
requests==2.27.1
requests-toolbelt==1.0.0
s3transfer==0.5.2
semver==2.13.0
six==1.17.0
sseclient==0.0.14
toml @ file:///tmp/build/80754af9/toml_1616166611790/work
typing_extensions @ file:///opt/conda/conda-bld/typing_extensions_1647553014482/work
urllib3==1.26.20
www-authenticate==0.9.2
zipp @ file:///tmp/build/80754af9/zipp_1633618647012/work

name: conductr-cli
channels:
  - defaults
  - https://repo.anaconda.com/pkgs/main
  - https://repo.anaconda.com/pkgs/r
  - conda-forge
dependencies:
  - _libgcc_mutex=0.1=main
  - _openmp_mutex=5.1=1_gnu
  - attrs=21.4.0=pyhd3eb1b0_0
  - ca-certificates=2025.2.25=h06a4308_0
  - certifi=2021.5.30=py36h06a4308_0
  - importlib-metadata=4.8.1=py36h06a4308_0
  - importlib_metadata=4.8.1=hd3eb1b0_0
  - iniconfig=1.1.1=pyhd3eb1b0_0
  - ld_impl_linux-64=2.40=h12ee557_0
  - libffi=3.3=he6710b0_2
  - libgcc-ng=11.2.0=h1234567_1
  - libgomp=11.2.0=h1234567_1
  - libstdcxx-ng=11.2.0=h1234567_1
  - more-itertools=8.12.0=pyhd3eb1b0_0
  - ncurses=6.4=h6a678d5_0
  - openssl=1.1.1w=h7f8727e_0
  - packaging=21.3=pyhd3eb1b0_0
  - pip=21.2.2=py36h06a4308_0
  - pluggy=0.13.1=py36h06a4308_0
  - py=1.11.0=pyhd3eb1b0_0
  - pyparsing=3.0.4=pyhd3eb1b0_0
  - pytest=6.2.4=py36h06a4308_2
  - python=3.6.13=h12debd9_1
  - readline=8.2=h5eee18b_0
  - setuptools=58.0.4=py36h06a4308_0
  - sqlite=3.45.3=h5eee18b_0
  - tk=8.6.14=h39e8969_0
  - toml=0.10.2=pyhd3eb1b0_0
  - typing_extensions=4.1.1=pyh06a4308_0
  - wheel=0.37.1=pyhd3eb1b0_0
  - xz=5.6.4=h5eee18b_1
  - zipp=3.6.0=pyhd3eb1b0_0
  - zlib=1.2.13=h5eee18b_1
  - pip:
      - argcomplete==3.1.2
      - arrow==1.2.3
      - boto3==1.23.10
      - botocore==1.26.10
      - charset-normalizer==2.0.12
      - colorama==0.4.5
      - idna==3.10
      - jmespath==0.10.0
      - jsonschema==2.6.0
      - pager==3.3
      - prettytable==0.7.2
      - psutil==5.9.8
      - pygments==2.14.0
      - pyhocon==0.3.35
      - pyjwt==1.4.2
      - pyreadline==2.1
      - python-dateutil==2.9.0.post0
      - requests==2.27.1
      - requests-toolbelt==1.0.0
      - s3transfer==0.5.2
      - semver==2.13.0
      - six==1.17.0
      - sseclient==0.0.14
      - urllib3==1.26.20
      - www-authenticate==0.9.2
prefix: /opt/conda/envs/conductr-cli

conductr_cli/test/test_license.py::TestDownloadLicense::test_download_ignoring_cached_token conductr_cli/test/test_license.py::TestDownloadLicense::test_download_with_cached_token conductr_cli/test/test_license.py::TestDownloadLicense::test_download_with_new_token conductr_cli/test/test_license.py::TestDownloadLicense::test_expired_token conductr_cli/test/test_license.py::TestDownloadLicense::test_invalid_terms_token
conductr_cli/test/test_license.py::TestSaveLicenseData::test_save_license_data conductr_cli/test/test_license.py::TestPostLicense::test_endpoint_not_supported conductr_cli/test/test_license.py::TestPostLicense::test_http_error conductr_cli/test/test_license.py::TestPostLicense::test_success conductr_cli/test/test_license.py::TestGetLicense::test_dcos_error conductr_cli/test/test_license.py::TestGetLicense::test_dcos_error_endpoint_not_supported conductr_cli/test/test_license.py::TestGetLicense::test_dcos_error_license_not_found conductr_cli/test/test_license.py::TestGetLicense::test_endpoint_not_supported conductr_cli/test/test_license.py::TestGetLicense::test_http_error conductr_cli/test/test_license.py::TestGetLicense::test_license_found conductr_cli/test/test_license.py::TestGetLicense::test_license_not_found conductr_cli/test/test_license.py::TestFormatLicense::test_all_fields_present conductr_cli/test/test_license.py::TestFormatLicense::test_not_present_expiry conductr_cli/test/test_license.py::TestFormatLicense::test_not_present_grants conductr_cli/test/test_license.py::TestFormatLicense::test_not_present_versions conductr_cli/test/test_license.py::TestFormatExpiry::test_expired conductr_cli/test/test_license.py::TestFormatExpiry::test_expiring_today conductr_cli/test/test_license.py::TestFormatExpiry::test_valid
conductr_cli/__init__.py conductr_cli/conductr_backup.py conductr_cli/license.py
conductr_cli/__init__.py conductr_cli/conductr_backup.py conductr_cli/license.py