They would at least need to have your ID on record, so they know you aren’t just getting a new private key at a different library every day. That said, I’d be happy with it if that record only showed that my ID had been used to acquire such a key, without any link between the ID and the key