Better make the URL memorable such as https://library.example.edu/restricted (you can always make a redirect) and print it next to the code. Some people might not want to be seen scanning it, and it helps accessibility either way.