well I confirmed that although 2019.1.1 is having me resave my tokens for uknown reasons, it does work using

-url <http://system.netsuite.com|system.netsuite.com>

even for my sandboxes