If you wish to apply NATIVE authentication to a database that was created without it, the procedure is slightly different depending on whether you specify NATIVE:credentialsDB or NATIVE:credentialsDB:LOCAL.
CALL SYSCS_UTIL.SYSCS_CREATE_USER('app', 'app');